Triage is supposed to make things simpler. In a lot of teams, it does the opposite. When you can’t reach a confident verdict early, alerts turn into repeat checks, back-and-forth, and “just escalate it” calls. That cost doesn’t stay inside… Read More "Top 5 Ways Broken Triage Increases Business Risk Instead of Reducing It"
A malicious NuGet package designed to mimic Stripe’s official .NET library has been uncovered by cybersecurity researchers, marking a shift in tactics from earlier cryptocurrency-focused campaigns to the broader financial sector. The package, named StripeApi.Net, impersonated Stripe.net, the legitimate helper… Read More "Malicious NuGet Package Targets Stripe Developers"
Ravie LakshmananFeb 25, 2026Social Engineering / Cloud Security The notorious cybercrime collective known as Scattered LAPSUS$ Hunters (SLH) has been observed offering financial incentives to recruit women to pull off social engineering attacks. The idea is to hire them for… Read More "SLH Offers $500–$1,000 Per Call to Recruit Women for IT Help Desk Vishing Attacks"
IBM’s 2026 X-Force report reveals 44% rise in cyberattacks on public apps, driven by AI and flaws Source link Read More "44% Surge in App Exploits as AI Speeds Up Cyberattacks, IBM Finds"
Ravie LakshmananFeb 25, 2026Cybersecurity / Malware Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET web application developers to steal sensitive data. The campaign, discovered by Socket, exfiltrates ASP.NET Identity data, including user accounts, role… Read More "Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware"
When it comes to cyber threats, business email compromise (BEC) is one of the sneakiest, most costly scams out there. These digital predators don’t rely on brute force, but are patient, tactical, and they exploit one weakness above all: human… Read More "Know the red flags: Business email compromise signs to look out for"
A newly identified malware strain built for covert, long-term access to compromised systems has been documented in recent security research. Dubbed PDFSIDER by Resecurity, the threat is delivered through Dynamic-Link Library (DLL) side-loading and is engineered to install an encrypted… Read More "Researchers Uncover PDFSIDER Malware – Infosecurity Magazine"
Critical WordPress, BeyondTrust, Honeywell CCTV, and PUSR router vulnerabilities surfaced on underground forums, while CISA issued 8 ICS advisories impacting critical manufacturing sectors. Cyble Research & Intelligence Labs (CRIL) tracked 1,102 vulnerabilities last week. Of these, 166 vulnerabilities already have publicly available Proof-of-Concept (PoC)… Read More "Cyble Weekly Vulnerability Reports New Flaws And Vulnerabilities"
Attackers are constantly on the prowl, scoping out vulnerabilities of network-connected devices in your systems. These devices—laptops, desktops, servers, IoT, and more—are like unlocked doors waiting for threat actors to stroll through. And here’s the kicker: many of these vulnerabilities… Read More "Take control: Locking down common endpoint vulnerabilities"
One of the world’s biggest marketplaces for fraudsters appears to be closing down its Telegram operations following sweeping sanctions imposed by the US and UK. London-based blockchain analytics company Elliptic revealed that Tudou Guarantee, which has become a staple of… Read More "Scam Marketplace Tudou Guarantee Shutters Telegram Ops"
