Threat Management

CISA warned that attackers are chaining a number of CVE-listed vulnerabilities into a single exploit script.

Nearly 1,000 imitation pages were discovered, targeting users looking for other software.

The “uncensored” GenAI tool was advertised on cybercrime forums with a focus on BEC scams.

The vulnerability could enable attackers to use nested archives to bypass Windows security warnings.

The backdoor spread laterally after initial access via a suspected SocGholish malware download.

Security pros say the link Secureworks made to a decade-old DPRK crowdfunding campaign are credible.

The fileless script injection is difficult to detect using traditional scanning methods.

The group claimed 85 victims in December but shows signs of inexperience.