Microsoft dismantled malware-signing network Fox Tempest

4 months ago

Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) that allowed attackers to sign malware with fake trusted certificates. Microsoft said it…

Poland shifts away from Signal following cyberattacks on officials’ accounts

4 months ago

Poland told officials to stop using the popular instant messaging app Signal after cyberattacks targeted government accounts. Poland has instructed…

Massive MENA cybercrime Operation Ramz disrupts infrastructure and arrests 201 suspects

4 months ago

INTERPOL led Operation Ramz in MENA, resulting in 201 arrests and 382 suspects tied to cybercrime networks. INTERPOL coordinated Operation…

Shai-Hulud worm copycats emerge after source code leak

4 months ago

Shai-Hulud worm copycats are already attacking NPM developers after its source code leaked, enabling fast supply chain exploitation. The first…

Grafana confirms GitHub token breach cybercrime group claims the attack<gwmw style="display:none;"></gwmw>

4 months ago

Grafana confirmed a GitHub token breach that exposed source code, but said no customer data or systems were affected. Grafana…

ShinyHunters hack 7-Eleven: franchisee data and Salesforce records exposed

4 months ago

7-Eleven confirmed a breach after ShinyHunters claimed theft of over 600,000 Salesforce records and franchisee data. 7-Eleven has confirmed a…

Public Amazon bucket leaks sensitive guest data from Japanese hotel platform Tabiq<gwmw style="display:none;"></gwmw>

4 months ago

A hotel check-in system exposed over 1 million passports, IDs, and selfies online due to a misconfigured cloud storage bucket.…

Chaotic Eclipse discloses MiniPlasma zero-day, suggesting a missing or undone 2020 Windows security fix

4 months ago

MiniPlasma: a Windows SYSTEM privilege escalation believed patched in 2020 (CVE-2020-17103) is still fully working on every patched Windows 11.…

Experts warn of active exploitation of critical NGINX flaw CVE-2026-42945

4 months ago

A critical NGINX flaw (CVE-2026-42945) is actively exploited, allowing crashes or possible code execution via malicious HTTP requests. A critical…

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 97

4 months ago

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware…

This website uses cookies.