CYBERSECURITY

A new campaign that disseminates Android malware has been connected to a North Korean threat actor. The campaign makes use of QR codes that are hosted on phishing websites that imitate the lo

Competition in the App Store was limited by Apple's App Tracking Transparency (ATT) privacy framework. According to the Italian Competition Authority, the company was able to "unilaterally im

One of the oldest advanced persistent threat (APT) actors in the world, Infy (also known as Prince of Persia), has been linked to new activity by threat hunters. Evidence of Infy's early acti

The goal of eco-friendly browsing is to minimize needless digital load while maintaining an effective, practical, and user-friendly browsing experience. Wave Browser is intended for users who

17 Mozilla Firefox browser add-ons' logo files have been used in a new campaign called GhostPoster. Koi Security, which found the campaign, claims that the extensions have been downloaded mor

Threat actors have begun to exploit two newly disclosed security flaws in Fortinet FortiGate devices. Cybersecurity company Arctic Wolf said it observed active intrusions involving malicious

Security teams frequently have the impression that their headlights are failing and they are driving through fog. Alerts proliferate, threats intensify, and SOCs find it difficult to determin

Uncrewed aircraft systems (UAS) and UAS critical components manufactured abroad have been added to the U.S. Federal Communications Commission's (FCC) Covered List. The action will prevent dro

A recently released malicious package on the npm repository functions as a complete WhatsApp API. It has the capacity to link the attacker's device to the victim's WhatsApp account and interc

The n8n workflow automation platform has been found to have a serious security flaw. The vulnerability has a CVSS score of

Researchers reveal information about a recent campaign that made use of websites that distribute cracked software. The campaign makes use of a new iteration of the Count loader, a stealthy an

Customers of Amazon Web Services (AWS) have been the target of an ongoing campaign that uses compromised Identity and Access Management (IAM) credentials to facilitate cryptocurrency mining.

A maximum-severity zero-day vulnerability in Cisco's AsyncOS software has been made known to users. A China-nexus advanced persistent threat (APT) actor known as UAT-9686 has been actively us

A security vulnerability has been added to the Known Exploited Vulnerabilities (KEV) catalog by the U.S. Cybersecurity and Infrastructure Security Agency. The vulnerability, known as CVE-2023

Jewelbug, a threat actor, has been concentrating more on European government targets. The cluster is being monitored by Check Point Research under the moniker Ink Dragon. It is estimated that

Kaspersky: An APT group connected to China tainted DNS queries in order to distribute the MgBot backdoor. The group primarily targeted particular victims with adversary-in-the-middle (AitM) a

The likelihood of small and medium-sized businesses (SMBs) being targeted has increased. Large companies investing in cybersecurity and refusing to pay ransoms are the reasons behind this shi

APT28, a Russian state-sponsored threat actor, has been linked to a credential-harvesting campaign that targets UKR[. ]net users. The activity builds on earlier findings from the cybersecurit