Biztonsági szemle

All of the packages employed Intermediary Language Weaving to insert malicious code within a Portable Executable .NET binary.

FishXProxy bolsters the legitimacy of phishing sites by exploiting Cloudflare Workers and SSL certificates.

Operations of the Chinese state-sponsored threat group APT41 have been strengthened with the inclusion of the updated StealthVector malware loader variant dubbed "DodgeBox."

Attacks by CRYSTALRAY involved the utilization of several open-source software tools, including the Sliver post-exploitation toolkit.

Here are three ways security teams can automate security tests to better combat cyber threats.

The gang's time from initial access to draining data out of a Veeam server is shockingly fast; after which the attackers went on to deploy actual ransomware in less than a day.

CVE-2024-6385, like another bug patched last month, could allow attackers to run pipelines as any user.

Users receiving the warnings are likely being targeted based on who they are or what they do, according to the vendor.

Microsoft’s notorious Internet Explorer has been brought out of retirement by threat actors using its security holes to serve malware.

It's time to wipe off the flattering grease paint and instead make executives see the real face of cybersecurity that works.

Threat actors had access to the automotive provider's networks for more than a month before they were discovered.