Users of ANY.RUN unknowingly uploaded over 1,700 Adobe documents from hundreds of companies out of suspicion This occurred when Microsoft Defender XDR incorrectly flagged an Adobe link as malicious Researchers…

Security researchers discovered a two-stage operation between the novel ToyMaker IAB and a Cactus ransomware affiliate. LAGTOY is the centerpiece of ToyMaker’s operations, a backdoor designed for prolonged yet controlled…

A sophisticated malware campaign has been targeting South Korean organizations for months. Based on malware and operational patterns, security researchers attributed this campaign to the Lazarus group with high confidence.…

Blue Shield of California started notifying patients of a prolonged data exposure from 2021 to February 2024. Private details were exposed to Google due to a misconfiguration in its website…

Germany’s domestic intelligence service flagged a threat actor’s intrusion attempt that targeted a Parliament chair for Iran relations. Hackers impersonated legitimate contacts in messages containing malicious links disguised as encrypted…

Security researchers have uncovered vulnerabilities in Zyxel’s USG FLEX H Series firewalls. The vulnerabilities hinge on improper file handling and relaxed permissions, allowing unauthorized system control. These could allow local…

The new PE32 Ransomware combines chaotic execution with poor security hygiene. Its key features include its use of the dual ransom model and leveraging Telegram as a C2 channel. PE32…