Collaborate Disseminate
ZDI has uncovered 1,000 malicious .lnk files used by state-sponsored and cybercrime threat actors to execute malicious commands.
The post 11 State-Sponsored APTs Exploiting LNK Files for Espionage, Data Theft appeared first on SecurityWeek.
Continue reading 11 State-Sponsored APTs Exploiting LNK Files for Espionage, Data Theft
Google has confirmed reports that it’s buying cloud security giant Wiz and says it’s prepared to pay $32 billion in cash.
The post Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash appeared first on SecurityWeek.
Continue reading Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash
Cloudflare launches Cloudforce Threat Events Feed, a service designed to provide security teams with real-time threat intelligence.
The post New Cloudflare Service Provides Real-Time Threat Intelligence appeared first on SecurityWeek.
Continue reading New Cloudflare Service Provides Real-Time Threat Intelligence
Exploit and vulnerability intelligence provider VulnCheck has raised $12 million in a Series A funding round.
The post VulnCheck Raises $12 Million for Vulnerability Intelligence Platform appeared first on SecurityWeek.
Continue reading VulnCheck Raises $12 Million for Vulnerability Intelligence Platform
Vulnerabilities in Nvidia Riva could allow hackers to abuse speech and translation AI services that are typically expensive.
The post Nvidia Riva Vulnerabilities Allow Unauthorized Use of AI Services appeared first on SecurityWeek.
Continue reading Nvidia Riva Vulnerabilities Allow Unauthorized Use of AI Services
The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.
The post Popular GitHub Action Targeted in Supply Chain Attack appeared first on SecurityWeek.
Continue reading Popular GitHub Action Targeted in Supply Chain Attack
Russian-Israeli LockBit ransomware developer Rostislav Panev has been extradited from Israel to the United States.
The post LockBit Ransomware Developer Extradited to US appeared first on SecurityWeek.
Continue reading LockBit Ransomware Developer Extradited to US
A recently disclosed Edimax zero-day vulnerability has been exploited in the wild by Mirai botnets for nearly a year.
The post Unpatched Edimax Camera Flaw Exploited Since at Least May 2024 appeared first on SecurityWeek.
Continue reading Unpatched Edimax Camera Flaw Exploited Since at Least May 2024
A cybercrime group named Storm-1865 has targeted hospitality organizations via fake Booking.com emails and the use of social engineering.
The post Microsoft Warns of Hospitality Sector Attacks Involving ClickFix appeared first on SecurityWeek.
Continue reading Microsoft Warns of Hospitality Sector Attacks Involving ClickFix
Researchers have analyzed the ability of the Chinese gen-AI DeepSeek to create malware such as ransomware and keyloggers.
The post DeepSeek’s Malware-Generation Capabilities Put to Test appeared first on SecurityWeek.
Continue reading DeepSeek’s Malware-Generation Capabilities Put to Test