News
-
"DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates"A new malspam campaign has been observed deploying DarkGate, an off-the-shelf malware. The current increase in DarkGate malware activity is likely given that the malware's developer has recently begun renting it out to a limited number of affiliates,… -
"MalDoc in PDFs: Hiding Malicious Word Docs in PDF Files"Japan's Computer Emergency Response Team (JPCERT) reveals a new "MalDoc in PDF" attack discovered in July 2023 that evades detection by embedding malicious Word documents within PDFs. The file sampled by JPCERT is a polyglot recognized as a PDF by most…
-
"Addressing Cybersecurity's Talent Shortage & Its Impact on CISOs"Recent research from ISC2 shows that the cybersecurity industry continues to face a severe talent shortage as the threat landscape evolves and the skills gap grows. The organization discovered that there is still a need for more than 3.4 million security…
-
"Easy-To-Exploit Skype Vulnerability Reveals Users' IP Address"Attackers can exploit a vulnerability in Skype mobile apps to discover a user's IP address, a piece of information that can endanger individuals whose physical safety depends on the secrecy of their location. A security researcher named Yossi discovered…
-
"Report Reveals Growing Disparity in Cyber Insurance Landscape"According to security researchers at Delinea, there is a growing disconnect between carriers and enterprises seeking robust coverage. Insights from 300 US organizations highlighted an escalating trend: securing cyber insurance is increasingly…
-
"Signs of Malware Attack Targeting Rust Developers Found on Crates.io"According to security researchers at Phylum, the Crates[.]io Rust package registry was targeted recently in what appeared to be the initial phase of a malware attack aimed at developers. The researchers noted that it is not uncommon for threat…
-
"Leaseweb Reports Cloud Disruptions Due to Cyberattack"Dutch infrastructure-as-a-service and cloud solutions provider Leaseweb shut down some critical systems last week due to a cyberattack. Leaseweb stated that it detected unusual activity in certain areas of its cloud environments on the night of…
-
"Clemson Mathematicians' Collaborative Digital Signature Is a Candidate to Become a National Standard"Clemson University and three other universities in Europe developed a digital signature that could become part of the national standard for encryption tools aimed at protecting the privacy of digital information against quantum computers in the future.…
-
"Tor Turns to Proof-Of-Work Puzzles to Defend Onion Network From DDoS Attacks"The Onion Router (Tor) faced a massive Distributed Denial-of-Service (DDoS) attack. DoS abuse continues to be a persistent problem, degrading the performance of the anti-censorship service and causing many to be concerned for its security. Tor's onion…
-
"LockBit Code Leak Sparks Wave of RaaS Attacks"LockBit 3.0, the LockBit ransomware gang's malware, was leaked last year. Researchers have found that several other threat groups used the leaked LockBit 3.0 builder to create their own ransomware variant and implement it in extortion campaigns. Soon…
-
"A Brazilian Phone Spyware Was Hacked and Victims' Devices 'Deleted' From Server"In recent years, WebDetetive, a Portuguese-language spyware, has compromised over 76,000 Android phones in South America, primarily in Brazil. WebDetetive is also the latest phone spyware company to be compromised in recent months. In an undated note…
-
"Met Police Officers at Risk After Serious Data Breach"London's Metropolitan Police Service is investigating a severe data breach that may have exposed personnel names, ranks, and pictures. The force informed staff that it is still investigating the "unauthorized access to the IT system of a Met supplier"…