News about technology companies and the tech market
A new group of threats identified by the Wiz firm, which have been baptized as JINX-0164, has exposed a dangerous mix of highly directed social engineering and custom malware for …
A new organized effort to SEO poisoning and manipulation of recommendations from artificial intelligence assistants is being used by malicious actors to distribute cryptominery ma…
Two recent campaigns, one directed at Windows teams using the Grandoreiro banking trojan and one directed at Android mobile with the RAT BTMOB, confirm a trend that response teams…
Protecting Active Directory accounts requires more than arbitrary rules on passwords: it requires policies designed for human reality and for current attack techniques. A policy t…
The coordinated operation announced by CrowdStrike with Google and the Shadowserver Foundation against the GlassWorm campaign brings to the fore a reality that experts have alread…
The recent FBI warning about the Silent Ransom Group (SRG) extortion group marks a significant escalation: it is no longer just malicious emails or remote accesses, but a hybrid t…
Microsoft has alerted about an active campaign of cryptojacking that incorporates a worrying news: attackers are taking advantage of interactions with chatbots based on large lang…
A critical failure in KnowledgeDeliver, a learning management system (LMS), allowed remote attackers to sign and deerialize malicious ViewState payloads and deploy the web shell .…
A new episode of cyberespionage attributed to the Iranian group known as MuddyWater reveals a more refined and stealth campaign that has affected at least nine organizations on fo…
