A social engineering-based malvertising campaign has been discovered targeting Japanese crypto users. The campaign spreads via malicious applications by taking advantage of sideloading vulnerabilities in them....
A cyberespionage group has been discovered targeting critical infrastructure organizations based in Southeast Asia. The threat group is apparently based in China and interested in exploiting...
A new Android-based trojan has been discovered that can hijack the Facebook accounts of users by stealing session cookies. According to the researchers, the malware campaigns...
Remote work promises to make the workforce more responsive and efficient, but it also presents significant security challenges, a former ODNI cyber chief says. While telework...
The underrated threat of related-domain attacks can enable malicious actors to circumvent many advanced website protection mechanisms, a group of researchers at the Technical University of...
China’s notorious website-blocking technology is impacting the global DNS system as well as restricting access to content locally, according to a comprehensive analysis of the technology. China’s DNS-based internet...
A vulnerability in Node.js that could allow a remote actor to perform domain hijacking attacks has been fixed. The maintainers of the JavaScript runtime environment have released a security...
A data breach at US waste management firm Waste Management Resources has exposed the healthcare information of current and former employees, as well as their dependents. The company...
Ransomware operators have added PrintNightmare exploits to their arsenal and are targeting Windows servers to deploy Magniber ransomware payloads. PrintNightmare is a class of security vulnerabilities (tracked...
Apple has dropped a controversial intellectual property lawsuit against virtualization software maker Corellium just days before the case was due to go to trial. Corellium’s software...