Biztonsági szemle

In the second of our new technical thought leadership series, Sophos X-Ops takes a detailed look at anti-ransomware techniques

Twenty-six billion records amounting to 12TB of data, a significant amount of which was compiled from prior data breaches, have been exposed as part of a colossal leak, which has been regarded as the Mother of all Breaches, according to Cybernews.

North Korean state-sponsored threat actor ScarCruft, also known as APT37, Ruby Sleet, Ricochet Chollima, InkySquid, and RedEyes, has targeted media outfits and individuals knowledgeable in North Korean affairs in a new attack campaign deploying the...

Numerous Android and Java apps leveraging abandoned open-source libraries, including all technologies based on Apache Maven, could be compromised through the novel MavenGate software supply chain attack technique, reports The Hacker News.

Cryptowallet-targeting macOS backdoor spread via cracked software BleepingComputer reports that threat actors have leveraged cracked macOS software to facilitate the distribution of information-stealing malware targeting cryptocurrency wallets on...

Significant enhancements to bolster stealth have been added to the latest variant of the Chaes malware identified as "Chae$ 4.1," Hackread reports.

Major Irish global aircraft leasing firm AerCap has been impacted by a ransomware attack on Jan. 17, which the newly emergent Slug ransomware gang has since claimed, reports The Register.

U.S. multinational fast food chain Subway had its internal system claimed to be compromised by the LockBit ransomware operation, resulting in the theft of a trove of sensitive financial information, The Register reports.

Hackread reports that hardware cryptocurrency wallet Trezor had almost 66,000 users' contact information possibly exfiltrated following a breach of its third-party support portal.

Major Ukrainian online bank Monobank faced a distributed denial-of-service attack over the weekend that involved 580 million service requests, marking the bank's largest DDoS attack yet amid the spate of such incidents against financial organizations...

The new bug is Apple's 12th WebKit zero-day in the last year, highlighting the increasing enterprise exposure to browser-borne threats.