August 12, 2019

Weekly Security News Roundup: WhatsApp Flaws Let Attackers Intercept, Manipulate Messages

3 min read - The world recently learned of new WhatsApp vulnerabilities that allowed a digital attacker to intercept and manipulate messages. Learn what else happened in security news last week.

August 6, 2019

MegaCortex Ransomware v2 Released With Anti-Analysis Features

2 min read - Threat actors have released version 2.0 of MegaCortex ransomware and have equipped their threat with anti-analysis features, among other new capabilities.

August 6, 2019

Phishers Impersonate Engineering License Boards to Target Utilities With LookBack Malware

2 min read - Phishers are impersonating engineering license boards in order to target U.S. utility organizations with LookBack malware.

July 29, 2019

Weekly Security News Roundup: US Company Selling Fully Working BlueKeep Exploit

3 min read - Last week in security news, a U.S. company announced that its penetration tool had incorporated a fully working exploit for the BlueKeep vulnerability.

July 23, 2019

Phishers Use Fake Office 365 Alerts to Compromise Admin Accounts

2 min read - Phishers are launching campaigns that leverage fake Office 365 alerts to compromise administrator accounts.

July 17, 2019

SWEED Threat Actor Uses Typosquatting, UAC Bypasses to Distribute Agent Tesla

< 1 min read - Researchers observed a threat actor known as SWEED using typosquatting and UAC bypassing techniques to distribute Agent Tesla and other malware.

July 15, 2019

Digital Attackers Now Using 16Shop Phishing Kit to Target Amazon Users

< 1 min read - Digital attackers are now abusing the 16Shop phishing kit to target Amazon users for the purpose of stealing access to their accounts.

July 15, 2019

Weekly Security News Roundup: Zero-Day Vulnerability Exploited in Buhtrap Attack Campaign

3 min read - Last week, security researchers identified a zero-day vulnerability that was instrumental in a targeted attack against companies in Eastern Europe.

CISO July 12, 2019

Why Security Incidents Often Go Underreported

4 min read - If you saw a coworker browsing through a database they weren't supposed to have access to, would you report it? New research suggests that employees often underreport such security incidents.

July 10, 2019

Astaroth Attack Infects Windows Machines Via Living-Off-the-Land Techniques

2 min read - An Astaroth attack leveraged only living-off-the-land techniques to run the backdoor directly in memory on Windows machines.