Biztonsági szemle

Combine the financial sector’s high online usage and need to make speedy decisions and it’s easy to understand why hackers use file-sharing services to prey on this vertical.

Such malicious JavaScript code — which is potentially targeted at exfiltrating the credentials of Cisco employees who usually use the site during the checkout process — may have been deployed through the exploitation of the critical XML external...

Intrusions commenced with a 20-second hit that reached up to 1.7 Gpps before the succeeding deployment of unprecedented Carpet Bomb attacks against the targeted network's subnet IPs the day after, according to Global Secure Layer researchers.

Attacks from a China-based command-and-control server involved MacroPack-based documents uploaded from China-, Taiwan-, and Pakistan-based IP addresses that ordered the installation of macros that facilitated Brute Ratel and Havoc distribution...

Aside from leveraging Telegram bot API to facilitate stealthier exfiltration of targeted devices' sensitive and personal data, Angry Stealer has also been enhanced with the "MotherRussia.exe" payload, which could enable further malicious activity.

Under the "Doppelganger" influence campaign, ANO Dialog, Structura National Technology, and the Social Design Agency have been ordered by Russian President Vladimir Putin's First Deputy Chief of Staff Sergei Kiriyenko to spread disinformation meant...

For three years now, more than a thousand social media accounts have been reposting the same pro-India, anti-Pakistan content on Facebook and X.

The new Rust-based ransomware-as-a-service has spurred rumors of an ALPHV/BlackCat comeback.

Colorado experienced the highest rate of cyberattacks since 2017, reporting 10,776 annual victims from 2020.

The White House Office of the National Cyber Director released a plan outlining steps network operators and service providers need to take to secure BGP from abuse and configuration errors.

Adversaries reusing abandoned package names sneak malware into organizations in a sort of software shell game.

Security pros say while side-channel attacks are difficult to pull off, the sheer volume of YubiKey devices in use makes the potential threat a real concern.