Email attachments are one of the most common ways cybercriminals deliver malware and launch attacks against unsuspecting victims. These malicious attachments can infect your device with viruses, spyware, ransomware, and other threats, compromising your security and privacy. It’s crucial to… Read More "How to Check for Malicious Email Attachments? Tips for Staying Safe"
California privacy regulators have taken fresh action against companies accused of trading in sensitive personal data without proper authorization. The latest decisions target a marketing firm that sold health-related profiles and a global analytics provider that failed to meet registration… Read More "California Shuts Down Health Data Resales By Unregistered Brokers"
Ten Emergency Directives issued between 2019 and 2024 have been formally retired by the US Cybersecurity and Infrastructure Security Agency (CISA) following a review that found their objectives had been met. The decision marks the most significant number of Emergency… Read More "CISA Closes Ten Emergency Directives After Federal Cyber Reviews"
The generalization of vibe coding has already led to major security incidents, according to Palo Alto Networks. This emerging practice, which consists of writing code and developing applications via AI prompts in natural language, is being adopted by both hobbyists… Read More "Palo Alto Networks Introduces New Vibe Coding Security Framework"
Security researchers have warned of a major digital skimming campaign that has gone undetected since 2022. Silent Push said the campaign uses scripts targeting at least six major payment network providers: American Express, Diners Club, Discover, JCB, Mastercard and UnionPay. Given… Read More "Global Magecart Campaign Targets Six Card Networks"
A parliamentary committee has asked for industry input to help it better scrutinize the Cyber Security and Resilience Bill (CSRB). First trailed in the King’s Speech in 2024, the CSRB is the long-awaited successor to the NIS Regulations 2018 and promises… Read More "Parliament Asks Security Pros to Shape Cyber Security and Resilience B"
A new Linux malware framework linked to Chinese-affiliated actors has been discovered by security researchers at Check Point Research. This highly modular framework, named VoidLink by its developers, includes over 30 plugins, cloud and container persistence capabilities and robust operational… Read More "New Chinese-Made Malware Framework Targets Linux Cloud Environments"
Cybercriminals are using are increasingly using a sneaky browser-in-the-browser (BitB) attack technique in efforts to steal login credentials of Facebook users. According to analysis by cybersecurity researchers at Trellix, there has been a surge in attackers distributing phishing emails which… Read More "Phishing Scams Exploit Browser Attacks to Steal Facebook Passwords"
A multi-stage Windows malware campaign, tracked as SHADOW#REACTOR, has been analyzed by cybersecurity researchers, revealing a complex infection chain designed to stealthily deploy the Remcos remote access Trojan. The campaign, discovered by the Securonix Threat Research team, relies on a… Read More "SHADOW#REACTOR Campaign Uses Text-Only Staging to Deploy Remcos RAT"
A high-severity security flaw affecting the self-hosted Git service Gogs is being actively exploited, prompting a warning from the US Cybersecurity and Infrastructure Security Agency (CISA). The issue has now been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog, signaling… Read More "CISA Flags Actively Exploited Gogs Vulnerability With No Patch"
