⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168 , has called it an evolution of the threat actor's tradecraft.
This article from WeLiveSecurity discusses how phishing attacks are evolving with new masks that bypass familiar security checks. It emphasizes that avoiding or limiting damage depends on how quickly an organization can detect and contain an attack once it lands in a user's inbox.
A former U.S. Army soldier has been sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies between April 2023 and December 2024.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities ( KEV ) catalog, following reports of active exploitation.
This article is a weekly roundup from Malwarebytes covering multiple cybersecurity incidents, including LinkedIn's new anti-fake profile measures, Kothamine malware abusing Tailscale, a ClickFix trap, shipping rebate scams, an OpenAI agent breach, Chrome security fixes, a Google fine, device code phishing, and a fake Claude Max giveaway.
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies over the weekend to secure their systems against attacks exploiting two critical Citrix NetScaler vulnerabilities.