Update your OptinMonster WordPress plugin immediately
WordPress, the incredibly popular content management platform, is currently dealing with a nasty plugin bug which allows redirects. What is...
News
Tips to protect your data, security, and privacy from a hands-on expert
This post was authored by one of the most active helpers on the Malwarebytes forums who wishes to remain anonymous....
NSA and CISA explained how to prevent and detect lateral movement in 5G networks via cloud systems
The US NSA and CISA published a security advisory to warn about threat actors compromising 5G networks via cloud infrastructure....
Shrootless: Microsoft finds Apple macOS vulnerability
Microsoft researchers have discovered a vulnerability in macOS, dubbed Shrootless, that can allow attackers to bypass System Integrity Protection (SIP)...
How we took part in MLSEC and (almost) won
This summer Kaspersky experts took part in the Machine Learning Security Evasion Competition (MLSEC) — a series of trials testing...
Microsoft found Shrootless bug in macOS that could bypass System Integrity Protection
Microsoft finds a flaw in macOS, dubbed Shrootless (CVE-2021-30892), that can allow attackers to bypass System Integrity Protection (SIP). Microsoft discovered a...
Over 1 million WordPress sites affected by OptinMonster plugin flaws
A vulnerability in the popular the OptinMonster plugin allows unauthorized API access and sensitive information disclosure. A high-severity vulnerability (CVE-2021-39341)...
Wslink, a previously undescribed loader for Windows binaries
ESET researchers discovered a previously undescribed loader for Windows binaries, tracked as Wslink, that runs as a server and executes...
AbstractEmu, a new Android malware with rooting capabilities
AbstractEmu is a new Android malware that can root infected devices to take complete control and evade detection with different tricks. Security...
Threat profile: Ranzy Locker ransomware
Ranzy Locker ransomware emerged in late 2020, when the variant began to target victims in the United States. According to a flash alert issued...
German investigators identify crypto millionaire behind REvil operations
German authorities have identified a Russian man named Nikolay K. who is suspected to be a prominent member of the...
What is fileless malware?
Unlike traditional malware, which relies on a file being written to a disk, fileless malware is intended to be memory...
Crooks steal $130 million worth of cryptocurrency assets from Cream Finance
Threat actors have stolen $130 million worth of cryptocurrency assets from the Cream Finance decentralized finance (DeFi) platform. C.R.E.A.M. Finance...
Extracting type information from Go binaries
During the 2021 edition of the SAS conference, I had the pleasure of delivering a workshop focused on reverse-engineering Go...
Avast releases free decrypters for AtomSilo and LockFile ransomware families
Security firm Avast released today decryptors for AtomSilo and LockFile ransomware that allow victims to recover their files for free....
Grief ransomware gang hit US National Rifle Association (NRA)
Grief ransomware operators claim to have compromised computer systems at US National Rifle Association (NRA) and added it to their...
Avast released a free decryptor for Babuk ransomware
Researchers from cybersecurity firm Avast released a decryption tool for Babuk ransomware that allows victims to recover their files for...
The 9th edition of the ENISA Threat Landscape (ETL) report is out!
I’m proud to announce the release of the 9th edition of the ENISA Threat Landscape (ETL) on the state of...
Watch out for the Steam skin “free knife” scam
Have you ever had someone run up to you in the street and insist you take their free knife? I...
Update now! Apple patches bugs in iOS and iPadOS
On two consecutive days Apple has released a few important patches. iOS 14.8.1 comes just a month after releasing iOS...
North Korea-linked Lazarus APT targets the IT supply chain
North Korea-linked Lazarus APT group is extending its operations and started targeting the IT supply chain on new targets. North...
Operations at Iranian gas stations were disrupted today. Cyber attack or computer glitch?
A cyberattack has disrupted gas stations from the National Iranian Oil Products Distribution Company (NIOPDC) across Iran. A cyber attack...
APT trends report Q3 2021
For more than four years, the Global Research and Analysis Team (GReAT) at Kaspersky has been publishing quarterly summaries of...
Dark HunTOR: Police arrested 150 people in dark web drug bust
Dark HunTOR: Police corps across the world have arrested 150 individuals suspected of buying or selling illicit goods on the...
