Tags → #stories

A data breach involving DemandScience has compromised approximately 122 million unique email addresses and various business contact details, raising concerns about privacy and data security.

The Emmenhtal Loader, a sophisticated malware loader identified in early 2024, employs advanced evasion techniques and utilizes legitimate Windows tools to execute various malicious activities.

Researchers at ETH Zurich are investigating new authentication methods for smart home devices to simplify login processes and enhance accessibility for users, particularly those facing challenges with traditional password systems.

Federal authorities have issued a warning to the healthcare sector about the Godzilla webshell, a sophisticated backdoor attributed to Chinese threat actors, urging organizations to adopt risk mitigation measures.

Google Chrome version 127 has introduced application-bound encryption (ABE) to enhance security against credential access attacks targeting cookies, a feature that is also being adopted across the broader Chromium browser ecosystem.

Raghu Nandakumara of Illumio emphasizes the need for a broader understanding of identity in cybersecurity, highlighting the importance of recognizing non-user entities alongside traditional user identities.

A cyber group linked to Hamas, known as WIRTE, has expanded its operations to target Israeli and regional entities amid the ongoing Israel-Hamas conflict.

An Incident Response Plan (IRP) is essential for businesses to effectively manage cybersecurity incidents and maintain operational resilience.

In 2023, zero-day vulnerabilities have emerged as a significant concern in cybersecurity, with a notable increase in exploitation linked to various products, particularly those from Cisco.

Infostealer malware, a type of remote access Trojan, poses a significant risk to information security by exfiltrating sensitive data from both corporate and consumer users.