Cyble's research reveals phishing sites targeting Mac apps to spread the potent Atomic Stealer (AMOS) malware, highlighting evolving cyber threats.

Cycode stressed securing software supply chains amid complex dependencies and third-party actions

New sanctions aim to disrupt their cyber and financial operations.

Cybersecurity Maturity Model Certification (CMMC) and a harden, detect, and respond mindset are key to protecting defense and critical infrastructure companies.

Chainalysis reveals that pump-and-dump schemes made Ethereum market manipulators over $240m in 2023 alone

The initiative is aimed at promoting policy, ethics, and expansion of artificial intelligence in the country.

Artificial intelligence (AI) is making its way from high-tech labs and Hollywood plots into the hands of the general population. ChatGPT, the text

Global collaborative effort focused on combating the global rise of phishing, malware and ransomware

A GAO report found that federal agencies are not assessing whether critical infrastructure sectors are implementing NIST ransomware protection guidance

A weakness in OpenAI’s GPT-4 lets speakers of less common languages like Zulu or Scots Gaelic easily bypass the model’s safety guardrails

It is imperative that healthcare and health-tech companies move beyond reactive measures and adopt a proactive stance in safeguarding sensitive patient information.

Three Americans were charged this week with stealing more than $400 million in a November 2022 SIM-swapping attack. The U.S. government did not name the victim organization, but there is every indication that the money was stolen from the now-defunct…

Everyone knows to patch vulnerabilities for internet-facing assets, but what about internal ones? One botnet is counting on your complacency.

Threat actors linked to the People's Republic of China, such as Volt Typhoon, continue to "pre-position" themselves within the critical infrastructure of the United States, according to military and law enforcement officials.

The attack, associated with Shuckworm, employs TTPs observed in prior campaigns against the Ukrainian military, predominantly utilizing PowerShell.

The China-backed APT was using the botnet, made up of mostly end-of-life, patchless routers from Cisco and Netgear, to set up shop inside US critical infrastructure.

The threat actor behind the campaign is still unknown, but it shares some similarities with other cyptojacking groups.