Cyber threats and attacks like ransomware continue to increase in volume and complexity with the endpoint typically being the most sought after and valued target. With the rapid expansion and adoption of AI, it is more critical than ever to… Read More "What the 2025 Gartner® Magic Quadrant™ Reveals"
Aug 26, 2025Ravie Lakshmanan Cybersecurity researchers have discovered a new variant of an Android banking trojan called HOOK that features ransomware-style overlay screens to display extortion messages. “A prominent characteristic of the latest variant is its capacity to deploy a… Read More "HOOK Android Trojan Adds Ransomware Overlays, Expands to 107 Remote Commands"
Aug 26, 2025Ravie LakshmananVulnerability / Data Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws impacting Citrix Session Recording and Git to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.… Read More "CISA Adds Three Exploited Vulnerabilities to KEV Catalog Affecting Citrix and Git"
Aug 26, 2025Ravie LakshmananMobile Security / Data Privacy Google has announced plans to begin verifying the identity of all developers who distribute apps on Android, even for those who distribute their software outside the Play Store. “Android will require all… Read More "Google to Verify All Android Developers in 4 Countries to Block Malicious Apps"
Aug 25, 2025Ravie LakshmananContainer Security / Vulnerability Docker has released fixes to address a critical security flaw affecting the Docker Desktop app for Windows and macOS that could potentially allow an attacker to break out of the confines of a… Read More "Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3"
Aug 25, 2025Ravie LakshmananMalware / Cyber Espionage A China-nexus threat actor known as UNC6384 has been attributed to a set of attacks targeting diplomats in Southeast Asia and other entities across the globe to advance Beijing’s strategic interests. “This multi-stage… Read More "UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats"
Cybersecurity researchers have flagged a new phishing campaign that’s using fake voicemails and purchase orders to deliver a malware loader called UpCrypter. The campaign leverages “carefully crafted emails to deliver malicious URLs linked to convincing phishing pages,” Fortinet FortiGuard Labs… Read More "Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads"
Aug 25, 2025Ravie LakshmananCybersecurity News / Hacking Cybersecurity today moves at the pace of global politics. A single breach can ripple across supply chains, turn a software flaw into leverage, or shift who holds the upper hand. For leaders, this… Read More "Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the-Wild Exploits & More"
Security Information and Event Management (SIEM) systems act as the primary tools for detecting suspicious activity in enterprise networks, helping organizations identify and respond to potential attacks in real time. However, the new Picus Blue Report 2025, based on over… Read More "Insights from 160 Million Attack Simulations"
Aug 25, 2025Ravie LakshmananMalware / Cyber Attack The advanced persistent threat (APT) actor known as Transparent Tribe has been observed targeting both Windows and BOSS (Bharat Operating System Solutions) Linux systems with malicious Desktop shortcut files in attacks targeting Indian… Read More "Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing"
