RansomHub ransomware uses new custom Betruger backdoor in attacks
A newly identified custom backdoor deployed in several recent ransomware attacks has been linked to at least one RansomHub ransomware-as-a-service…
Author: tuffbrownboy
UK urges critical orgs to adopt quantum cryptography by 2035
The UK’s National Cyber Security Centre (NCSC) has published specific timelines on migrating to post-quantum cryptography (PQC), dictating that critical…
Browser-based phishing attacks surge due to AI
Artificial intelligence has driven the 140% year-over-year increase in browser-based phishing intrusions in 2024, with the technology also behind the 130% year-over-year…
WordPress security plugin WP Ghost vulnerable to remote code execution bug
Popular WordPress security plugin WP Ghost is vulnerable to a critical severity flaw that could allow unauthenticated attackers to remotely…
Is it time to retire ‘one-off’ pen tests for continuous testing?
If your organization is like many, annual penetration testing may be a regular part of your security protocols. After completing…
GitHub Action supply chain attack exposed secrets in 218 repos
The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it, with it…
Microsoft lifts Windows 11 upgrade block after Asphalt 8 crash fix
Microsoft has lifted an upgrade block that prevented Asphalt 8: Airborne players from upgrading their systems to Windows 11 24H2…
HellCat hackers go on a worldwide Jira hacking spree
Swiss global solutions provider Ascom has confirmed a cyberattack on its IT infrastructure as a hacker group known as Hellcat…
Flaw in Windows shortcut abused by at least 11 threat groups
Attackers are making use of Windows shortcut (.lnk) files to dupe users into running malicious code on their systems.Researchers with…
Malware campaign ‘DollyWay’ breached 20,000 WordPress sites
A malware operation dubbed ‘DollyWay’ has been underway since 2016, compromising over 20,000 WordPress sites globally to redirect users to malicious sites.…