News about viruses, Ransomware, Trojans and other malicious software
A new campaign for macOS users has once again focused on a social engineering technique that exploits a system confidence application: the Editor Script. Security researchers have…
Botnets don't disappear; they reinvent. In recent weeks, the response and detection teams have refocused on a malicious software piece known as Chaos, but not because it is someth…
The security community has just discovered a critical failure in Apache ActiveMQ Classic that had not been detected for more than a decade and that allows to run remote commands i…
Security researchers have identified a speed-phishing campaign linked to the group known as APT28 (also referred to as Pawn Storm or Forest Blizzard) that is using an undocumented…
The artificial intelligence company Anthropic has launched a cybersecurity initiative called Project Glasgow, which seeks to take advantage of advanced capabilities of its new bor…
A critical failure in Ninja Forms' premium File Uploads plugin for WordPress is being exploited in practice and can allow attackers to upload arbitrary files without authenticatio…
A recent incident once again focuses on a risk that companies continue to underestimate: the integration of third parties as means of mass access to sensitive data. According to r…
In recent months, a large-scale cyber-espionage operation has come to light that has taken advantage of domestic routers and small poorly protected offices to "recognize from with…
U.S. security agencies issued an urgent call: a group of Iran-related actors are targeting Rockwell / Allen-Bradley's programmable logical controllers (PLCs) accessible from the I…
