⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
What began as a single compromised identity quickly expanded into an organization’s development and cloud environments. In our latest Cyberattack Series report, we examine how the Microsoft Detection and Response Team (DART)—the team that delivers Microsoft Defender Experts Cybersecurity Incident Response —investigated activity by Storm-3068 , a threat actor that turned a successful self-service password reset into access to Azure DevOps, development pipelines, and Kubernetes resources.
The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud and very, very messy."
Microsoft observed a China-based actor using a previously unidentified malware framework in targeted intrusions against telcos, universities, medical, and government-related organizations.
This article is part two of a practical guide on Symantec PAM secondary sites, focusing on why a 'less is more' approach benefits clustering. It explains how simplifying the secondary site configuration can improve reliability, reduce complexity, and enhance security.
This article warns about a malware campaign that distributes the Node.js-based JSCEAL malware through Facebook ads impersonating a cryptocurrency exchange. The ads lure users with promises of cryptocurrency rewards, leading to infection.
This article describes a smishing campaign that sends SMS messages pretending to protect Pi Coin accounts, directing users to phishing sites that steal wallet information. The attackers exploit the trust in account protection services to harvest credentials.