Androxgh0st botnet has expanded, integrating Mozi IoT payloads and targeting web server vulnerabilities

Interlock employs both “big-game hunting” and double extortion tactics against its victims

An ICO audit of AI recruitment tools found numerous data privacy issues that may lead to jobseekers being discriminated against and privacy compromised

TikTok Technology Canada, Inc, the subsidiary of Chinese group ByteDance, will have to cease its operations in Canada

The UK’s National Cyber Security Centre has released malvertising guidance for brands and their ad partners

CIISec report reveals the average wage for UK security professionals is now over £87,000

Questions remain over what a corporate ban will achieve, since Canadians will still be able to use the app.

Though Cisco reports of no known malicious exploitation attempts, but thanks to a CVSS 10 out of 10 security vulnerability (CVE-2024-20418) three of its wireless access points are vulnerable to remote, unauthenticated cyberattacks.

The malware combines a miner and data stealer, and it packs functions that make detection and mitigation a challenge.

This issue of the ESET APT Activity Report reviews notable activities of threat actors that were documented by ESET researchers from April 2024 until the end of September 2024.

Discover the best vulnerability management tools of 2024. Compare top solutions, explore features and benefits, and find expert reviews to guide your choice.

The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data

Notorious threat actor IntelBroker released a cache of stolen data

Salaries in cybersecurity have increased 7% above inflation in the last few years