Security Bulletin

North Korea's newest threat actor uses every trick in the nation-state APT playbook, and most of cybercrime's tricks, too. It also developed a whole video game company to hide malware.

Microsoft says the group leverages social-engineering techniques and has developed its own malware.

The political consultant who wrote the script and paid for the deepfake audio used in robocalls was fined $6 million by the FCC.

Corporate admins should patch the max-severity CVE-2024-23108 immediately, which allows unauthenticated command injection.

Researchers went in-depth on an attack by the threat group, which mainly targets US companies in the education and industrial goods sectors, specifically to maximize financial gain.

House Subcommittee on Innovation, Data, and Commerce lawmakers have approved an overhauled draft of the American Privacy Rights Act, which would not only provide additional data collection, retention, and utilization restrictions for U.S. businesses...

Chinese nationals Yunhe Wang, Jingping Liu, and Yanni Zheng have been sanctioned by the U.S. Treasury Department for operating the residential proxy service 911 S5, which was a botnet comprised of over 19 million residential IP addresses that had...

Infamous cybercrime site BreachForums has reportedly been successfully resurrected by one of its administrators ShinyHunters weeks after it was taken down in a law enforcement effort led by the FBI, which also involved the seizure of the Telegram...

TechCrunch reports that U.S. consumer-grade spyware app pcTattletale has ended operations following a data breach over the weekend that resulted in the exposure of information stolen from its victims on its defaced website.

Major U.S. title insurance provider First American Financial Corporation had information from almost 44,000 individuals compromised following a cyberattack in December, which led to the takedown of some of its systems, according to BleepingComputer.