Threat actors linked to the People's Republic of China, such as Volt Typhoon, continue to "pre-position" themselves within the critical infrastructure of the United States, according to military and law enforcement officials.

The attack, associated with Shuckworm, employs TTPs observed in prior campaigns against the Ukrainian military, predominantly utilizing PowerShell.

The China-backed APT was using the botnet, made up of mostly end-of-life, patchless routers from Cisco and Netgear, to set up shop inside US critical infrastructure.

The threat actor behind the campaign is still unknown, but it shares some similarities with other cyptojacking groups.

ESET researchers discovered several Android apps that posed as messaging tools but carried VajraSpy, a RAT used by the Patchwork APT group

The last quarter of 2023 saw an 80% year-on-year increase in ransomware victim claims, according to ReliaQuest

Cloudflare revealed suspected nation-state attackers compromised its systems and accessed source code using credentials stolen in the Okta breach

The study involved monitoring email reminders and login prompts sent to almost 10,000 faculty and staff members

What will the end of passwords look like in practice and what can businesses do to prepare?

The cyberattackers, believed to be state sponsored, didn't get far into Cloudflare's global network, but not for lack of trying.

The ransomware landscape has become more diversified, with major players like LockBit losing ground to smaller, more dynamic collectives

New data from Lloyds found that romance scam victims increased by 22% in 2023, with the average amount lost per incident £6937

Some scams make a telltale sound—rinnng, rinnng! Yup, the dreaded robocall. But you can beat them at their game.    Maybe it’s a call about renewing an