Microsoft has reminded admins that Exchange Server 2013 is reaching its extended end-of-support (EOS) date in 60 days, on April 11, 2023. Today’s announcement follows two...
The APT37 threat group uses a new evasive ‘M2RAT’ malware and steganography to target individuals for intelligence collection. APT37, also known as ‘RedEyes’ or ‘ScarCruft,’ is...
The LastPass security breach in late 2022 sent a shockwave through the security community. Password managers are typically seen as the most secure and trusted platforms because they...
Oakland has declared a local state of emergency because of the impact of a ransomware attack that forced the City to take all its IT systems...
A hacker is using fake code-signing certificates impersonating cybersecurity firm Emsisoft to target customers using its security products, hoping to bypass their defenses. Code signing certificates...
The Defense Department’s inspector general found that unsanctioned apps downloaded onto government-issued mobile devices “could pose operational and cybersecurity risks to DOD information and information systems.”...
Belgium has become the first European country to adopt a national, comprehensive safe harbor framework for ethical hackers, according to the country’s cybersecurity agency. The Centre...
Apache has resolved a vulnerability potentially exploitable to launch remote code execution (RCE) attacks using Kafka Connect. Announced on February 8, the critical vulnerability is tracked...
International high-speed rail operator, Eurostar, is emailing its users this week and forcing them to reset their account passwords in a bid to “upgrade” security. But users who visit the password...
Hackers conducting a new financially motivated campaign are using a variant of the Xortist commodity ransomware named ‘MortalKombat,’ together with the Laplas clipper in cyberattacks. Both...