New Phishing Kit Xiū gǒu Targets Users Across Five Countries With 2,000 Fake Sites
Cybersecurity researchers have disclosed a new phishing kit that has been put to use in campaigns targeting Australia, Japan, Spain, the U.K., and the…
Day: October 31, 2024
Facebook Businesses Targeted in Infostealer Phishing Campaign
An unknown threat actor is targeting Facebook businesses and advertising account users in Taiwan through a phishing campaign, using decoy emails and f…
Cybersecurity Job Market Stagnates, Dissatisfaction Abounds
Even though 90% of organizations have unfilled positions or underskilled workers on their cybersecurity teams, hiring for those jobs has, for the firs…
Canada Grapples With ‘Second-to-None’ PRC-Backed Threat Actors
Chinese state-backed actors have become Canada's most pressing cyber threat, with the People's Republic of China (PRC) collecting data from Canada's g…
North Korea’s Andariel Pivots to ‘Play’ Ransomware Games
One of North Korea's most prominent state-sponsored threat groups has pivoted to using Play ransomware in recent attacks, signifying the first time th…
Sophos Used Custom Implants to Surveil Chinese Hackers Targeting Firewall Zero-Days
British cybersecurity vendor Sophos on Thursday published details of a years-long “cat-and-mouse” tussle with sophisticated Chinese government-bac…
New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics
Oct 31, 2024Ravie LakshmananSpyware / Mobile Security
Cybersecurity researchers have discovered an improved version of an Apple iOS spyware call…
LottieFiles Issues Warning About Compromised “lottie-player” npm Package
Oct 31, 2024Ravie LakshmananCryptocurrency / Software Development
LottieFiles has revealed that its npm package "lottie-player" was compromised …
Noma Launches With Plans to Secure Data, AI Life Cycle
The rapid adoption of artificial intelligence (AI) and machine learning (ML) tools in enterprises has put the pressure on security teams to secure the…
The Case Against Abandoning CrowdStrike Post-Outage
COMMENTARYThe now-infamous July CrowdStrike outage sparked global chaos and countless conversations about vendor security. Despite the industry noise …