Collaborate Disseminate
Researchers at Cyfirma have discovered FireScam, an Android malware disguised as ‘Telegram Premium’ that steals data, monitors activity, and infiltrates devices. Learn about its distribution, functionality, and the impact on user privacy. Continue reading New FireScam Infostealer Spyware Hits Android via Fake Telegram Premium
Researchers discovered a malicious package on the npm package registry that resembles a library for Ethereum smart contract vulnerabilities but actually drops an open-source remote access trojan called Quasar RAT onto developer systems. Continue reading NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT
The chief information security officer (CISO) role has undergone a remarkable transformation, evolving from a purely technical position to a role that bridges business strategy, operational efficiency, and cybersecurity.
The post The modern CISO is a c… Continue reading The modern CISO is a cornerstone of organizational success
In this Help Net Security interview, Devin Ertel, CISO at Menlo Security, discusses how innovations like AI and closer collaboration between browser vendors and security providers will shape the future of browser security.
The post Best practices for e… Continue reading Best practices for ensuring a secure browsing environment
Threat actors entered Treasury Department systems through BeyondTrust. The breach may be related to the Salt Typhoon attacks reported throughout the year. Continue reading China-Linked Cyber Threat Group Hacks US Treasury Department
A recent claim that a critical zero-day vulnerability existed in the popular open-source file archiver 7-Zip has been met with skepticism from the software’s creator and other security researchers. Continue reading Fake 7-Zip Exploit Code Traced to AI-Generated Misinterpretation
72% of security leaders agree that the age of AI necessitates a complete reset of how organizations approach application security, according to Cycode. This urgency is reinforced by the fact that 93 billion lines of code were generated in the past year… Continue reading CISOs don’t invest enough in code security
This article presents key findings from 2024 reports on data breaches. Breaches are taking longer to resolve and are becoming more costly for organizations. With recovery times extending and costs increasing, businesses face growing challenges in manag… Continue reading The real cost of data breaches for businesses
Patch Tuesday is Microsoft’s monthly update day for fixing vulnerabilities. Learn its purpose, benefits, and how it enhances system security.
Continue reading What Is Patch Tuesday? Microsoft’s Monthly Update Explained
Researchers at FortiGuard Labs have identified a prolific attacker group known as “EC2 Grouper” who frequently exploits compromised credentials using AWS tools. Continue reading FortiGuard Labs Links New EC2 Grouper Hackers to AWS Credential Exploits