Threat Management

The “uncensored” GenAI tool was advertised on cybercrime forums with a focus on BEC scams.

The vulnerability could enable attackers to use nested archives to bypass Windows security warnings.

The backdoor spread laterally after initial access via a suspected SocGholish malware download.

Such lagging vulnerability remediation for ProxyLogon significantly contrasts patching activities for a pair of Ivanti flaws also leveraged in Salt Typhoon attacks, tracked as CVE-2023-46805 and CVE-2024-21887, which have been addressed in over 92% of affected Ivanti devices, findings from Tenable revealed.

Security pros say the link Secureworks made to a decade-old DPRK crowdfunding campaign are credible.

The fileless script injection is difficult to detect using traditional scanning methods.

The group claimed 85 victims in December but shows signs of inexperience.

Cl0p, Akira, and RansomHub were the next most active ransomware operations, according to a report from NCC Group.

Attack on the Committee on Foreign Investment in the U.S. was part of the recent Treasury Department breach.

The Biden White House is getting set to issue a last-minute order regarding cybersecurity regulations.