Collaborate Disseminate
The new campaign masqueraded as an Orange Telecom account management app to deliver the latest iteration of Anubis banking malware.
Continue reading 400 Banks’ Customers Targeted with Anubis Trojan
An exclusive roundtable of security researchers discuss the specific implications of CVE-2021-44228 for smaller businesses, including what’s vulnerable, what an attack looks like and to how to remediate. Continue reading What the Log4Shell Bug Means for SMBs: Experts Weigh In
Podcast: Cybereason shares details about its vaccine: a fast shot in the arm released within hours of the Apache Log4j zero-day horror show being disclosed.
Continue reading How to Buy Precious Patching Time as Log4j Exploits Fly
Analysts find at least 10 Linux botnets actively exploiting Log4Shell flaw. Continue reading Where the Latest Log4Shell Attacks Are Coming From
The cybersecurity Hiroshima of the year – the Apache Log4j logging library exploit – has spun off 60 bigger mutations in less than a day, researchers said.
Continue reading Log4Shell Is Spawning Even Nastier Mutations
Malicious email attachments with macros are one of the most common ways hackers get in through the door. Huntress security researcher John Hammond discusses how threat hunters can fight back. Continue reading Next-Gen Maldocs & How to Solve the Human Vulnerability
Scammers are using fake job listings to empty the wallets of young, hopeful victims looking to break into the gaming industry. Continue reading ‘Appalling’ Riot Games Job Fraud Takes Aim at Wallets
The Log4Shell vulnerability critically threatens anybody using the popular open-source Apache Struts framework and could lead to a “Mini internet meltdown soonish.” Continue reading Zero Day in Ubiquitous Apache Log4j Tool Under Active Attack
Cyberattackers are targeting security vulnerabilities in four plugins plus Epsilon themes, to assign themselves administrative accounts. Continue reading Sprawling Active Attack Aims to Take Over 1.6M WordPress Sites
The threat group, first identified in June, focuses solely on data exfiltration and subsequent extortion, and has already targeted 40 victims since September. Continue reading ‘Karakurt’ Extortion Threat Emerges, But Says No to Ransomware