Microsoft dismantled malware-signing network Fox Tempest

3 weeks ago

Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) that allowed attackers to sign malware with fake trusted certificates. Microsoft said it…

Poland shifts away from Signal following cyberattacks on officials’ accounts

3 weeks ago

Poland told officials to stop using the popular instant messaging app Signal after cyberattacks targeted government accounts. Poland has instructed…

Massive MENA cybercrime Operation Ramz disrupts infrastructure and arrests 201 suspects

3 weeks ago

INTERPOL led Operation Ramz in MENA, resulting in 201 arrests and 382 suspects tied to cybercrime networks. INTERPOL coordinated Operation…

Shai-Hulud worm copycats emerge after source code leak

3 weeks ago

Shai-Hulud worm copycats are already attacking NPM developers after its source code leaked, enabling fast supply chain exploitation. The first…

Grafana confirms GitHub token breach cybercrime group claims the attack<gwmw style="display:none;"></gwmw>

3 weeks ago

Grafana confirmed a GitHub token breach that exposed source code, but said no customer data or systems were affected. Grafana…

ShinyHunters hack 7-Eleven: franchisee data and Salesforce records exposed

3 weeks ago

7-Eleven confirmed a breach after ShinyHunters claimed theft of over 600,000 Salesforce records and franchisee data. 7-Eleven has confirmed a…

Public Amazon bucket leaks sensitive guest data from Japanese hotel platform Tabiq<gwmw style="display:none;"></gwmw>

3 weeks ago

A hotel check-in system exposed over 1 million passports, IDs, and selfies online due to a misconfigured cloud storage bucket.…

Chaotic Eclipse discloses MiniPlasma zero-day, suggesting a missing or undone 2020 Windows security fix

3 weeks ago

MiniPlasma: a Windows SYSTEM privilege escalation believed patched in 2020 (CVE-2020-17103) is still fully working on every patched Windows 11.…

Experts warn of active exploitation of critical NGINX flaw CVE-2026-42945

3 weeks ago

A critical NGINX flaw (CVE-2026-42945) is actively exploited, allowing crashes or possible code execution via malicious HTTP requests. A critical…

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 97

3 weeks ago

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware…

This website uses cookies.