CYBER SECURITY

A new Android malware-as-a-service (MaaS) platform named SuperCard X can facilitate near-field communication (NFC) relay attacks, enabling cybercriminals to conduct fraudulent cashouts. The active campaign is targeting customers of…

The notorious North Korean Lazarus hacking group has reportedly adopted 'ClickFix' tactics to deploy malware targeting job seekers in the cryptocurrency industry, particularly centralized finance (CeFi). This development, reported by…

Researchers have detected an alarming surge in malicious scanning activity targeting Palo Alto Networks’ GlobalProtect VPN portals. Over a 30-day period, nearly 24,000 unique IP addresses have attempted to access these critical security…

Passwords, you can’t live with them and most organizations seem to be lagging when it comes to living without them. Despite the best efforts of industry giants to convince us that passkeys are the future right now, we seem to be stuck in a…

The Federal Bureau of Investigation(FBI) has recently warned of weird ransomware attack threats delivered by the United States Postal Service, yes really, alongside a dangerous ransowmare campaign from so-called Ghost attackers, and some of…

Internet service providers (ISP) in China and the West Coast of the United States have become the target of a mass exploitation campaign that deploys information stealers and cryptocurrency miners on compromised hosts. The findings come…

Microsoft had discovered five Paragon Partition Manager BioNTdrv.sys driver flaws, with one used by ransomware gangs in zero-day attacks to gain SYSTEM privileges in Windows. The vulnerable drivers were exploited in 'Bring Your Own…

Arecent study by researchers from the Max Planck Institute for Security and Privacy (MPI-SP) and Ruhr University Bochum (RUB) reveals that reconfigurable intelligent surfaces (RIS) can be used to launch targeted jamming attacks on…

Update, Feb. 24, 2025: This story, originally published Feb. 22, has been updated with a stark example of a real-world infostealer malware attack campaign targeting the U.S. military, as well as a new warning from the head of engineering at…

Microsoft has issued a security advisory for CVE-2025-21396, a critical authentication bypass vulnerability that could allow attackers to spoof credentials and gain unauthorized access to Microsoft accounts. Cybersecurity experts are…