Out-of-date Internet of Things (IoT) devices can easily become exploited by bad actors looking to use them for their own agenda.

LummaC2, a C-based MaaS tool first identified in 2022, has resurfaced to exfiltrate credentials and personal data

The hacking subsidiary of the Iranian Islamic Revolutionary Guard Corps (RGC) has targeted satellite, communications, oil and gas and government sectors

KPMG research finds money laundering accounted for the majority of fraud cases heard in the first half of 2024

ESET uncovers a South Korean cyber-espionage campaign featuring a zero-day exploit for WPS Office

Discover practical strategies to prevent account takeover with real-life scenarios from the Purple Team. Learn how to secure your accounts and avoid attack escalation.

CISA alerts on CVE-2024-39717 in Versa Director. Urgent updates, MFA, and stronger network security are advised to prevent serious exploitation risks.

Novel attack vectors leverage the CVE-2023-22527 RCE flaw discovered in January, which is still under active attack, to turn targeted cloud environments into cryptomining networks.

The pivot is one of several changes the groups using the malware have used in recent attacks.

CISA warned about the RCE zero-day vulnerability in AVTECH IP cameras in early August, and now vulnerable systems are being used to spread malware.

Ransomware attacks on US schools and colleges have surged, with 491 incidents since 2018, affecting over 8000 institutions

Explore Ukraine's Kursk Offensive, blending strategic military maneuvers with cyber tactics, reshaping the conflict's dynamics since 2023.

The Iranian state-backed hacking group has continued its usual password spraying and social engineering techniques to gain a foothold in target environments

Enterprises globally have already ramped up cybersecurity spending to contend with potent new threats – and there’s more to come in the year ahead

The most popular office software suite in China actually has two critical vulnerabilities, which allowed hackers the opportunity for remote code execution. Time to patch.