INC
You must login to view this content
Aggregator
INC
2 months ago
You must login to view this content
cohenido
New TCLBanker malware self-spreads over WhatsApp and Outlook
2 months ago
A new trojan named TCLBanker, which targets 59 banking, fintech, and cryptocurrency platforms, uses a trojanized MSI installer for Logitech AI Prompt Builder to infect systems. [...]
Bill Toulas
Ivanti customers confront yet another actively exploited zero-day
2 months ago
Attackers are hitting a frequent target in the network edge space, intruding victim networks through a defect in a widely used mobile endpoint security product.
The post Ivanti customers confront yet another actively exploited zero-day appeared first on CyberScoop.
Matt Kapko
Hackers Use Fake Claude AI Site to Infect Users With New Beagle Malware
2 months ago
Researchers have discovered a new malvertising campaign using a fake Claude AI website to plant a new, undocumented backdoor named Beagle on user devices.
Deeba Ahmed
Iranian government hackers using Chaos ransomware as cover, researchers say
2 months ago
Incident responders from cybersecurity firm Rapid7 published a report about a recent intrusion that initially appeared to be a Chaos ransomware attack but was later discovered to be an attack attributed to MuddyWater, an Iranian APT group tied to the country’s Ministry of Intelligence and Security (MOIS).
Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks
2 months ago
Palo Alto says hackers exploited PAN-OS zero-day CVE-2026-0300 for weeks, gaining root access to exposed firewalls and hiding traces. Palo Alto Networks warned that suspected state-sponsored hackers have been exploiting the critical PAN-OS zero-day CVE-2026-0300 for nearly a month. After exploiting the flaw, attackers deployed tunneling tools such as EarthWorm and ReverseSocks5, used stolen credentials […]
Pierluigi Paganini
After Replacing TeamPCP Malware, 'PCPJack' Steals Cloud Secrets
2 months ago
PCPJack makes innovative use of parquet files for stealthy, pre-validated target discovery as it canvasses multiple cloud environments.
Nate Nelson
INC
2 months ago
You must login to view this content
cohenido
Building for the future
2 months ago
This afternoon, we sent the following email to our global team. One of our core values at Cloudflare is transparency, and we believe it's important that you hear this directly from us because it’s a major moment at Cloudflare.
Matthew Prince
Trump officials are steering a cybersecurity scholarship program toward AI
2 months ago
The latest development has thrown scholars for a curveball, and has some worried about being “left out to dry” when it comes to job positions.
The post Trump officials are steering a cybersecurity scholarship program toward AI appeared first on CyberScoop.
Tim Starks
Ransom House
2 months ago
You must login to view this content
cohenido
Has CISA Finally Found Its New Leader in Tom Parker?
2 months ago
Dark Reading investigates rumors that Tom Parker, a board room "operator" and longtime cyber exec, could be next in line to take over CISA.
Becky Bracken
Железный депутат с паспортом ворвался в мэрию: чиновникам пришлось отчитываться перед машиной за новый интернет
2 months ago
Киберпанк окончательно пришел в политику.
New PCPJack worm steals credentials, cleans TeamPCP infections
2 months ago
A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing TeamPCP's access to the systems. [...]
Bill Toulas
Грибной трип в коралловых рифах. Зачем учёные «накурили» рыб и почему результат удивил даже их
2 months ago
Такого уровня миролюбия в этой среде не фиксировали никогда.
Ivanti Warns of New EPMM Zero-Day Exploited Using Credentials Stolen in January Attacks
2 months ago
Ivanti has issued an urgent security advisory for its Endpoint Manager Mobile (EPMM) product, disclosing five vulnerabilities including one that is actively exploited in the wild.
Dark Web Informer
U.S. CISA adds a flaw in Ivanti Endpoint Manager Mobile (EPMM) to its Known Exploited Vulnerabilities catalog
2 months ago
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Ivanti Endpoint Manager Mobile (EPMM) to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in the Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2026-6973 (CVSS score of 7.1), to its Known Exploited Vulnerabilities (KEV) catalog. Ivanti warns customers […]
Pierluigi Paganini
Australia warns of ClickFix attacks pushing Vidar Stealer malware
2 months ago
The Australian Cyber Security Center (ACSC) is warning organizations of an ongoing malware campaign using the ClickFix social engineering technique to distribute the Vidar Stealer info-stealing malware. [...]
Bill Toulas
Submit #808867: Tenda CX12L V16.03.53.12 Stack-based Buffer Overflow [Accepted]
2 months ago
Submit #808867 / VDB-361927
lv1020