Security Bulletin

Attacks from a China-based command-and-control server involved MacroPack-based documents uploaded from China-, Taiwan-, and Pakistan-based IP addresses that ordered the installation of macros that facilitated Brute Ratel and Havoc distribution...

Aside from leveraging Telegram bot API to facilitate stealthier exfiltration of targeted devices' sensitive and personal data, Angry Stealer has also been enhanced with the "MotherRussia.exe" payload, which could enable further malicious activity.

Under the "Doppelganger" influence campaign, ANO Dialog, Structura National Technology, and the Social Design Agency have been ordered by Russian President Vladimir Putin's First Deputy Chief of Staff Sergei Kiriyenko to spread disinformation meant...

For three years now, more than a thousand social media accounts have been reposting the same pro-India, anti-Pakistan content on Facebook and X.

The new Rust-based ransomware-as-a-service has spurred rumors of an ALPHV/BlackCat comeback.

Colorado experienced the highest rate of cyberattacks since 2017, reporting 10,776 annual victims from 2020.

The White House Office of the National Cyber Director released a plan outlining steps network operators and service providers need to take to secure BGP from abuse and configuration errors.

Adversaries reusing abandoned package names sneak malware into organizations in a sort of software shell game.

Security pros say while side-channel attacks are difficult to pull off, the sheer volume of YubiKey devices in use makes the potential threat a real concern.

The ElectionGuard project allows anyone — voters, campaign staffers, and election officials — to cryptographically verify ballots, a promise that may bolster faith in election integrity.

Sophisticated social engineering is expected to accompany threat campaigns that are highly targeted and aimed at stealing crypto and deploying malware.

Aside from announcing the general availability of the Nozomi TI Expansion Pack Nozomi also unveiled new Vantage Threat Cards, which would enable improved data analysis from threat intelligence feeds through the Nozomi Vantage console.