March 10, 2020

Threat Actors Launch Attacks Based on Exchange Control Panel Vulnerability

2 min read - Threat groups are exploiting a vulnerability in the Exchange Control Panel (ECP) just weeks after Microsoft issued a patch, security researchers have discovered.

February 26, 2020

Cloud Snooper Attack Uses Innocent-Looking Requests to Bypass Firewall Rules

2 min read - Security researchers discovered a new attack they're calling "Cloud Snooper" that uses innocent-looking requests to bypass the rules of many, if not most, firewalls.

January 22, 2020

FTCODE Ransomware Adds Functionality for Stealing Credentials From Web Browsers, Email Clients

2 min read - Security researchers observed that FTCODE ransomware has added functionality for stealing users' credentials from web browsers and email clients.

January 22, 2020

EFS Ransomware Attacks Overcome Major Antivirus Tools in Proof-of-Concept Tests

2 min read - EFS ransomware attacks targeting Windows users could potentially overcome several major signature-based antivirus tools, researchers have discovered.

January 20, 2020

Weekly Security News Roundup: Nemty Ransomware Plans to Begin Leaking Victims’ Data

3 min read - Security researchers discovered Nemty ransomware's plans to create a website for the purpose of publishing its non-paying victims' data. Learn what else happened last week in security news.

January 14, 2020

Microsoft Sway Domains Used in Phishing Campaigns to Create Bogus Landing Pages

2 min read - A phishing technique that makes use of Microsoft Sway could attack organizations even if they don't use the tool, security researchers warn.

December 10, 2019

Malicious Office 365 App Leveraged by Phishing Campaign to Access Victims’ Accounts

2 min read - A phishing campaign is using a malicious Microsoft Office 365 app to access victims' accounts without stealing their credentials.

December 10, 2019

Snatch Ransomware Reboots Machines In Safe Mode to Bypass Endpoint Protection

2 min read - The Snatch ransomware reboots infected machines in Safe Mode so that it can bypass endpoint protection and encrypt users' data.

December 3, 2019

Weekly Security News Roundup: Dexphot Used Obfuscation, Fileless Tactics and Polymorphism

3 min read - Researchers detailed the multiple layers of obfuscation, fileless tactics and polymorphism techniques employed by the Dexphot malware campaign. Learn what else happened last week in security news.

November 25, 2019

Weekly Security News Roundup: Phoenix Keylogger Gaining Traction Among Cybercriminals

3 min read - Researchers revealed that the new Phoenix keylogger is steadily gaining traction among digital criminals on underground web forums. Learn what else happened last week in security news.