Here’s what to know about the malware with an insatiable appetite for valuable data, so much so that it tops this year’s infostealer detection charts 22 Oct 2025 • , 3 min. read Infostealers remain one of the most persistent… Read More "How it preys on personal data – and how to stay safe"
A cryptocurrency scam known as “ShieldGuard” has been dismantled after researchers identified it as a malicious browser extension designed to harvest sensitive user data. The operation, uncovered by Okta Threat Intelligence and described in an advisory published on March 17,… Read More "Crypto Scam “ShieldGuard” Dismantled After Malware Discovery"
ESET researchers have recently observed a new instance of Operation DreamJob – a campaign that we track under the umbrella of North Korea-aligned Lazarus – in which several European companies active in the defense industry were targeted. Some of these… Read More "Lazarus targets the UAV sector"
A newly identified local privilege escalation (LPE) vulnerability has been discovered affecting default installations of Ubuntu Desktop 24.04 and later, allowing attackers to gain full root access. The flaw, tracked as CVE-2026-3888, stems from the interaction between two core system… Read More "New Ubuntu Flaw Enables Local Attackers to Gain Root Access"
Key Takeaways Best practices for threat detection in hybrid cloud environments focus on visibility across both cloud and on-premise systems. Hybrid cloud monitoring helps security teams identify suspicious behavior across distributed workloads. Detection and response strategies must connect identity, network,… Read More "How Can Organizations Improve Threat Detection and Response in Hybrid Cloud Environments?"
Cisco has released patches for a critical vulnerability in its out-of-band management solution, present in many of its servers and appliances. The flaw allows unauthenticated remote attackers to gain admin access to the Cisco Integrated Management Controller (IMC), which gives… Read More "Cisco fixes critical IMC auth bypass present in many products"
Shadow IT leaves organizations exposed to cyberattacks and raises the risk of data loss and compliance failures 24 Oct 2025 In the remote and hybrid work era, employee use of unsanctioned hardware and software (known as shadow IT) has become… Read More "Cyber risk thrives in the shadows"
More than 32 million high-confidence phishing emails were detected by Darktrace in 2025, showcasing a substantial escalation in identity-driven cyber threats. The data was collected by Darktrace from incidents across its global customer base and points to a year defined by automation, convergence… Read More "Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks"
Kate Knibbs: So, you went twice? Makena Kelly: Yes, Kate. I went twice. Kate Knibbs: I missed that. Zoë Schiffer: Wait, is the Pentagon Pizza thing a joke about the pizza predicting the war? Makena Kelly: Yeah. Zoë Schiffer: Oh,… Read More "‘Uncanny Valley’: Iran’s Threats on US Tech, Trump’s Plans for Midterms, and Polymarket’s Pop-up Flop"
A new malware-as-a-service (MaaS) has been promoted on Telegram as combining spyware, stealer, and remote access capabilities, Kaspersky reports. Named CrystalX RAT, it emerged in January, when it was offered as Webcrystal RAT. Featuring a control panel identical to WebRAT,… Read More "Sophisticated CrystalX RAT Emerges – SecurityWeek"
