Security Bulletin

Kaspersky researchers have identified that malicious actors are exploiting the Steam Workshop platform, specifically through the Wallpaper Engine application, to distribute malware.

In addition to executing entirely in memory, the malware's infection chain incorporates other anti-analysis techniques designed to frustrate detection.

To enforce the ban, social media platforms will be required to implement age verification for new users, likely through ID uploads or facial age scans.

The attackers send emails designed to raise alarm about potential account compromise and OTP abuse, tricking recipients into opening an attachment, according to the Genians Security Center.

The DragonForce ransomware operation, active since 2023 and linked to the Scattered Spider threat group, has employed custom Go-based malware dubbed "Backdoor.Turn".

GhostTree leverages NTFS junctions, a file system feature that allows one directory to point to another.

The National Testing Agency announced the restrictions on Tuesday, aiming to disrupt cheating networks that allegedly use Telegram to sell fake exam papers and spread misinformation before the NEET re-test scheduled for June 21.

The researcher, known as BobDaHacker, said they exploited a flaw in FIFA's back-end API by registering as a player agent.

An open letter signed by dozens of security experts asked the government to reverse export restrictions on Anthropic's Claude Fable 5 and Mythos 5 models.

Saviynt's Jaime Lewis-Gross discusses what it means to be a modern sales engineer.

FishMonger, a China-nexus threat group, has deployed an undocumented version of the Linux backdoor against government targets in Honduras, Taiwan, Thailand, and Pakistan.