News about viruses, Ransomware, Trojans and other malicious software
An argument injection failure in Gogs- the Git self-hosted platform written on Go - allows remote execution of code (CERs) in Internet-accessible instances without an official pat…
A classic security debate has been reopened in recent weeks: Do you need to publish vulnerabilities without warning the supplier? or coordinate disclosure to minimize risk? A rese…
A United States court imposed 33 years in prison a Ramanan Pathmanathan, a Canadian citizen who pleaded guilty to a sextorsion scheme that for eight years exploited more than 145 …
A new group of threats identified by the Wiz firm, which have been baptized as JINX-0164, has exposed a dangerous mix of highly directed social engineering and custom malware for …
A new organized effort to SEO poisoning and manipulation of recommendations from artificial intelligence assistants is being used by malicious actors to distribute cryptominery ma…
Two recent campaigns, one directed at Windows teams using the Grandoreiro banking trojan and one directed at Android mobile with the RAT BTMOB, confirm a trend that response teams…
The coordinated operation announced by CrowdStrike with Google and the Shadowserver Foundation against the GlassWorm campaign brings to the fore a reality that experts have alread…
The recent FBI warning about the Silent Ransom Group (SRG) extortion group marks a significant escalation: it is no longer just malicious emails or remote accesses, but a hybrid t…
Cybersecurity researchers have revealed a critical failure in Gitea's container record that allows remote attackers to download images marked as private without credentials. Vulne…
