APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures
[ad_1] The Russian state-sponsored threat actor known as APT29 has been linked to an advanced phishing campaign that’s targeting diplomatic […]
Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems
[ad_1] Apr 19, 2025Ravie LakshmananLinux / Malware Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade
ASUS Confirms Critical Flaw in AiCloud Routers; Users Urged to Update Firmware
[ad_1] Apr 19, 2025Ravie LakshmananNetwork Security / Vulnerability ASUS has disclosed a critical security flaw impacting routers with AiCloud enabled
Chinese Smishing Kit Powers Widespread Toll Fraud Campaign Targeting U.S. Users in 8 States
[ad_1] Cybersecurity researchers are warning of a “widespread and ongoing” SMS phishing campaign that’s been targeting toll road users in
Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoader
[ad_1] A new multi-stage attack has been observed delivering malware families like Agent Tesla variants, Remcos RAT, and XLoader. “Attackers
Experts Uncover New XorDDoS Controller, Infrastructure as Malware Expands to Docker, Linux, IoT
[ad_1] Apr 18, 2025Ravie LakshmananIoT Security / Malware Cybersecurity researchers are warning of continued risks posed by a distributed denial-of-service
[Webinar] AI Is Already Inside Your SaaS Stack — Learn How to Prevent the Next Silent Breach
[ad_1] Apr 18, 2025The Hacker NewsSaaS Security / Shadow IT Your employees didn’t mean to expose sensitive data. They just
CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download
[ad_1] Apr 18, 2025Ravie LakshmananWindows Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a
Node.js Malware Campaign Targets Crypto Users with Fake Binance and TradingView Installers
[ad_1] Apr 17, 2025Ravie LakshmananCybersecurity / Malware Microsoft is calling attention to an ongoing malvertising campaign that makes use of
Mustang Panda Targets Myanmar With StarProxy, EDR Bypass, and TONESHELL Updates
[ad_1] The China-linked threat actor known as Mustang Panda has been attributed to a cyber attack targeting an unspecified organization
