In the latest set of attacks involving EAGERBEE, an injector DLL is designed to launch the backdoor module, which is then ...

Chinese hackers exploited BeyondTrust API keys in a major Treasury cyberattack; CISA confirms no wider federal impact.

Two severe vulnerabilities (CVE-2024-9138, CVE-2024-9140) in Moxa routers risk privilege escalation and command execution.

FireScam malware disguises as Telegram Premium, exploiting permissions for data theft and persistent device control ...

India's draft DPDP Rules empower citizens with data rights, strict security mandates, and ₹250 crore penalties. Feedback open ...

PLAYFULGHOST malware mimics Gh0st RAT with advanced spyware features, targeting users via phishing and SEO poisoning ...

Stay ahead of the latest threats with our weekly cybersecurity updates. It’s quick, simple, and keeps you safe.

Malicious npm packages impersonate Hardhat, exfiltrating private keys and mnemonics, with 1,092 downloads reported.

SaaS threats soared in 2024, with 7,000 password attacks blocked per second, phishing up 58%, and $3.5 billion in losses.

U.S. sanctions Integrity Technology Group for aiding Flax Typhoon's state-sponsored hacks, targeting U.S. systems since 2021.

CVE-2024-43405 in Nuclei allows signature bypass, enabling arbitrary code execution. Update to version 3.3.7 for critical ...

Malicious npm package 'ethereumvulncontracthandler' delivers Quasar RAT to Windows systems, bypassing sandbox defenses, with ...