News about viruses, Ransomware, Trojans and other malicious software
In recent weeks we have seen a persistent and relatively discreet actor in Iranian cyberspace, known as Indy (also referred to as Prince of Persia), change his way of operating to…
If you found the inbox this morning full of strange messages with issues like "Activate your account" or support notifications from companies you don't even know, you're not alone…
The security community has detected a serious failure in n8n, the workflow automation platform, which allows remote execution of commands on the server where the application runs …
Cybersecurity researchers have brought to light an active campaign that manipulates NGINX facilities and management panels such as Baota (BT) to divert legitimate web traffic to i…
If you use NGINX to serve sites, do load balancing or as a proxy inverse, pay attention: a campaign has recently been detected in which a malicious actor commits NGINX servers and…
A new malware operation has again shown how attackers combine technical ingenuity with the abuse of legitimate system functions to go unnoticed. Securonix researchers have describ…
The United States Agency for Infrastructure and Cybersecurity (CISA) has given an ultimatum: federal agencies must park their GitLab instances for a vulnerability that was correct…
A recent Huntress investigation revealed a maneuver that sounds like déjà vu for anyone following security in Windows, but that continues to work in the real world: malicious acto…
In recent months, threat response teams have seen a paradigm shift: campaigns that steal credentials and secrets are no longer an exclusive Windows problem and begin to thrive in …
