Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A massive fraud operation dubbed DoppelCart uses more than 119,000 domains to run a network of fake e-commerce stores that steal credit card information and personal data from shoppers. The network impersonates legitimate brands and uses sophisticated SEO techniques to appear in search results.
The EU Cyber Resilience Act's vulnerability reporting requirements take effect September 11, giving software vendors as little as 24 hours to report actively exploited flaws. ActiveState explains why knowing exactly what shipped and when vulnerabilities were discovered will be critical to meeting the new requirements.
A Linux rootkit targeting devices in F5 BIG-IP APM environments can intercept PHP file loading and inject a PHP web shell into memory. The malware operates entirely in memory, leaving minimal forensic traces on the filesystem.
CIA official touts agency’s Cyber Mission Center in capture of Venezuela’s Maduro CIA cyber operators created a “flawless intelligence picture” that led to the capture of Venezuelan President Nicolás Maduro earlier this year, the agency’s deputy chief said on Tuesday. Operation Absolute Resolve, in which the U.S. plucked Maduro and his wife from their bunker in Caracas in January, was made possible by a flawless intelligence picture built on cyber operations enabled by the CIA's Cyber Mission Center.
Russian suspect in bank account takeovers is extradited to US A Russian web developer who played a role in a multimillion-dollar bank account takeover scheme has been extradited to the U.S. to face an indictment in the case, federal authorities said Tuesday. Sergei Anatolyevich Filimonov, 36, appeared in an Atlanta federal court on September 4, pleading not guilty to charges of fraud and identity theft, prosecutors said.
Italian tech collective Autistici/Inventati shuts down after US terrorist designation The Italian technology collective Autistici/Inventati (A/I) announced Sunday it will shut down operations after the U.S. government declared it a terrorist organization and imposed sanctions. The volunteer-run collective was founded in 2001 on the principles of an open internet free from corporate and government control and was explicitly anti-capitalist and anti-fascist.