Recent Security News

  • October 10, 2023 at 08:24AM – Researcher Conversations: Natalie Silvanovich From Google’s Project Zero

    October 10, 2023 at 08:24AM Natalie Silvanovich, a member of Google’s Project Zero, discusses her work in finding and fixing zero-day vulnerabilities. Project Zero aims to make zero-day vulnerabilities difficult to exploit by attackers. Silvanovich explains the team’s disclosure policy, research process, and the necessary skills for being a successful researcher. She also touches on…

    Read More

  • October 10, 2023 at 07:00AM – New Report: Child Sexual Abuse Content and Online Risks to Children on the Rise

    October 10, 2023 at 07:00AM A recent report from Thorn, a nonprofit focused on protecting children from sexual abuse, reveals that minors are increasingly sharing sexual images of themselves online, often as a result of consensual or coercive interactions with adults. The report aligns with findings from other child safety organizations, showing a significant increase…

    Read More

  • October 10, 2023 at 07:00AM – Researchers Uncover Grayling APT’s Ongoing Attack Campaign Across Industries

    October 10, 2023 at 07:00AM A previously unknown threat actor named Grayling has been identified as the culprit behind a series of cyberattacks on organizations in Taiwan, including manufacturing, IT, and biomedical sectors. Symantec’s Threat Hunter Team discovered the attacks, which began in February and utilized a distinct DLL side-loading technique to deploy payloads. The…

    Read More

  • October 10, 2023 at 06:06AM – New Magecart Campaign Alters 404 Error Pages to Steal Shoppers’ Credit Cards

    October 10, 2023 at 06:06AM A new Magecart campaign is using websites’ 404 error pages to conceal malicious code, according to security researcher Roman Lvovsky. The campaign targets Magento and WooCommerce websites, inserting the code directly into HTML pages and scripts. The attacks use a multi-stage process to capture and exfiltrate visitor data on checkout…

    Read More

  • October 10, 2023 at 04:33AM – Ransomware attacks register record speeds thanks to success of infosec industry

    October 10, 2023 at 04:33AM A study conducted by Secureworks revealed that cyber attackers are now deploying ransomware within 24 hours of gaining initial access to a victim’s environment. In nearly two-thirds of cases, ransomware was deployed within a day, and in over 10% of incidents, it was deployed within five hours. This marks a…

    Read More