CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

February 4, 2019

Cybercriminals Generated $56 Million Over 12 Years From Monero Crypto-Mining Malware

2 min read - An analysis of more than 4.4 million malware samples showed botnets were responsible for crypto-mining at least 4.3 percent of Monero over a 12-year period.

January 28, 2019

Razy Trojan Installs Malicious Browser Extensions to Steal Cryptocurrency

2 min read - Security researchers observed the Razy Trojan installing malicious extensions across multiple web browsers to steal cryptocurrency.

January 22, 2019

Collection #1 Data Breach Exposes Nearly 733 Million Records, Highlighting Need for Multifactor Authentication

2 min read - The Collection #1 data breach, which exposed nearly 733 million unique email messages and 21 million passwords, underscores the urgent need for enterprises to adopt multifactor authentication.

January 15, 2019

BBC Email Scam Spoofs Broadcaster’s Site to Generate Bitcoin

2 min read - Researchers identified a new email scam using seemingly legitimate BBC News webpages to reroute user clicks and generate bitcoin.

January 15, 2019

New Reverse Proxy Tool Can Bypass Two-Factor Authentication and Automate Phishing Attacks

2 min read - A new reverse proxy tool called Modlishka can easily automate phishing attacks and bypass two-factor authentication (2FA) — and it's available for download on GitHub.

January 14, 2019

University of Maryland Researchers Use Audio Files and AI to Defeat reCaptcha Challenges

2 min read - University of Maryland researchers warn that with limited resources, threat actors could launch a successful cyberattack on Google's bot-detecting reCaptcha service.

January 14, 2019

The Dark Overlord Claims to Have Stolen Secrets of 9/11 Attacks in Law Firm Data Breach

2 min read - The threat group known as The Dark Overlord has claimed responsibility for a law firm data breach involving files allegedly related to the 9/11 terrorist attacks.

January 9, 2019

Phishing Kit Uses Custom Web Font to Impersonate Major US Bank

< 1 min read - A new phishing kit uses a custom web font to implement a substitution cipher in its campaign to target customers of a major U.S. bank.

January 8, 2019

Malvertising Campaign Delivers Vidar Information Stealer and GandCrab Ransomware

2 min read - Researchers have spotted a malvertising campaign that is delivering two payloads to victims: the Vidar information stealer and GandCrab ransomware.

January 8, 2019

NRSMiner Crypto-Mining Malware Infects Asian Devices With the Help of EternalBlue Exploit

2 min read - Security researchers report that the newest version of NRSMiner crypto-mining malware is causing problems for companies that haven't patched the EternalBlue exploit.