News
  • "Montana State Receives $4.47 Million Award for Improving Cybersecurity"

    Montana State University (MSU) is leading a new effort to reduce software vulnerabilities across various systems, building on nearly five years of helping the Departments of Defense (DOD) and the Department of Homeland Security (DHS) in improving methods…

  • "Android Malware: A Million People Downloaded These Malicious Apps Before They Were Finally Removed From Google Play"

    Google has removed some malicious apps from the Google Play Store that were downloaded by over a million Android users. The apps infected smartphones with malware and bombarded devices with malicious pop-up ads. According to cybersecurity researchers at…

  • "'Unauthorized Transactions' Lead to Missing Funds at FTX"

    The cryptocurrency exchange platform FTX says unsanctioned actors stole customers' digital assets, thus initiating a rush to disconnect digital wallets from the Internet. A message posted on the FTX Telegram page warned users of malware on the platform.…

  • "Organizations Warned of Critical Vulnerability in Backstage Developer Portal Platform"

    According to researchers at Oxeye, Backstage, an open platform for building developer portals, is affected by a critical vulnerability whose exploitation could have a serious impact on a targeted enterprise.  Backstage was developed by Spotify and…

  • "Police Celebrate Arrest of 59 Suspected Scammers"

    According to Europol, a recent month-long anti-fraud crackdown across Europe arrested 59 suspected scammers.  Europol noted that the operation ran through October as part of the 2022 e-Commerce Action (eComm 2022) initiative.  It saw 19…

  • "Avast Details Worok Espionage Group's Compromise Chain"

    Avast researchers observed the recently discovered espionage group Worok abusing Dropbox API to exfiltrate data via a backdoor hidden in seemingly harmless image files. The experts began their investigation from an ESET analysis of attacks on…

  • "SSVC: Prioritization of Vulnerability Remediation According to CISA"

    As 2021 set a record for the number of vulnerabilities published and threat actors improved their ability to weaponize vulnerabilities, timely and improved prioritization and remediation of vulnerabilities should be a goal for all organizations. The US…

  • "42,000 Sites Used to Trap Users in Brand Impersonation Scheme"

    'Fangxiao' is a malicious for-profit organization that has established a massive network of more than 42,000 web domains that impersonate well-known brands in order to redirect users to sites promoting adware apps, dating sites, or 'free' giveaways. The…

  • "Researchers Say China State-backed Hackers Breached a Digital Certificate Authority"

    As part of an ongoing campaign that began in March 2022, a suspected Chinese state-sponsored actor breached a digital certificate authority as well as government and defense agencies in Asian countries. Symantec linked the attacks to an adversarial group…

  • "Researchers Sound Alarm on Dangerous BatLoader Malware Dropper"

    A dangerous new malware loader called BatLoader, with features for determining whether it is on a business system or a personal computer, has begun rapidly infecting systems worldwide. VMware Carbon Black researchers are tracking the threat, finding that…

  • "Delivery Confirmation in Messenger Apps Reveals Recipient's Location"

    A security vulnerability in messenger services has been discovered by an international research team led by Dr. Theodor Schnitzler of TU Dortmund University. They discovered that measuring the time it takes for a message to be delivered makes it possible…

  • "SMB Cybersecurity Concerns Persist Amid Geopolitical Tensions"

    OpenText Security Solutions surveyed 1,332 security and Information Technology (IT) professionals in the US, the UK, and Australia, finding that small and medium-sized businesses (SMBs) are concerned that geopolitical tensions will worsen ransomware…