Talos' Nick Biasini discusses the biggest shifts and trends in the threat landscape so far. We also focus on one state sponsored actor that has been particularly active this year, and talk about why defenders need to be paying closer attention to infostealers.

As cybersecurity threats evolve in complexity and scale, the traditional approach to defending an organization’s digital assets has become…

SonicWall is warning that a recently fixed access control flaw tracked as CVE-2024-40766 in SonicOS is now "potentially" exploited in attacks, urging admins to apply patches as soon as possible.

A new Android malware named SpyAgent uses optical character recognition (OCR) technology to steal cryptocurrency wallet recovery phrases from screenshots stored on the mobile device.

​After Office 2024 launches in October, Microsoft will disable ActiveX controls by default in Word, Excel, PowerPoint, and Visio client apps.

The company, Tosan, which provides IT services to 45% of the country’s banks, has paid $561,000 worth of bitcoin so far. 

American car rental giant Avis disclosed a data breach after attackers breached one of its business applications last month and stole customer personal information.

​Transport for London, the city's public transportation agency, revealed today that its staff has limited access to systems and email due to measures implemented in response to a Sunday cyberattack.

U.S. officials said they expect Russia, Iran and China to increase the cadence of influence operations targeting voters over the final two months of this election cycle.

Learn about Tropic Trooper, a cyber espionage group that has expanded its focus to the Middle East, targeting government entities.

Beware of Netflix phishing emails! Learn how cybercriminals impersonate Netflix to steal sensitive information and how to protect yourself.

Uncover the sophistication of the Supercar Phishing Kit: a new level of phishing tactics targeting Microsoft 365 users.

Discover the powerful Babylon Remote Access Trojan (RAT) used in a cyber espionage campaign targeting political figures in Malaysia. Find out how it works and its impact.

Critical security advisory: Learn about CVE-2024-7923, an authentication bypass flaw in Red Hat Pulpcore affecting Satellite deployments.

Stay informed about the latest cybersecurity threat: SideWalk malware targeting critical vulnerability in GeoServer.

Critical security advisory: IBM webMethods Integration Server vulnerabilities revealed. Learn about CVE-2024-45076 and CVE-2024-45075 and their potential impact.

Recently fixed access control SonicOS flaw, tracked as CVE-2024-40766, is potentially exploited in attacks in the wild, SonicWall warns.

Car rental giant Avis disclosed a data breach that impacted one of its business applications in August compromising customers' personal information.

A critical flaw in the LiteSpeed Cache plugin for WordPress could allow unauthenticated users to take control of arbitrary accounts.

U.S. CISA adds Draytek VigorConnect and Kingsoft WPS Office bugs to its Known Exploited Vulnerabilities catalog.

Learn about the latest phishing tactics in Latin America and the reappearance of Mekotio, BBTok, and Grandoreiro banking Trojans.