1+ week, 3+ day ago   (520+ words) US healthcare provider Nutex Health has disclosed that a threat actor has stolen sensitive data, including of patients, and threatened to publish it online. The Texas-based firm, which delivers care through facilities throughout the US, made the notification in an…...

1+ mon, 1+ week ago   (417+ words) A cryptomining operation has been observed abandoning root access on compromised Linux servers in favor of impersonating low-privileged users, a deliberate downgrade designed to avoid the alerts that root activity triggers in a security operations center (SOC). According to new…...

1+ mon, 3+ week ago   (487+ words) A newly disclosed vulnerability in the Ubuntu component that isolates snap applications has been found to hand full root access to any local user on default installations of Ubuntu Desktop 24.04, 25.10 and 26.04. According to new research from the Qualys Threat Research…...

1+ mon, 3+ week ago   (721+ words) A new sophisticated social engineering operation targeting Web3 and cryptocurrency professionals has been identified by researchers at SOCRadar. Attributed to the notorious North Korean-aligned hacking group Famous Chollima, also known as Wagemole, the campaign leverages fraudulent job interviews and highly interactive…...

1+ mon, 4+ week ago   (232+ words) After a four-day security suspension, Progress has restored access to its ShareFile Storage Zones Controller. Progress Software detected “a credible external security threat” on July 10 that prompted the company to temporarily suspend the service. The service was resumed on July…...

2+ mon, 2+ day ago   (304+ words) A new multi-purpose backdoor recently discovered by Microsoft marks a dangerous shift toward unified cyber-attack frameworks. The backdoor, tracked as GigaWiper, is linked to a malware implant with extensive operational capabilities, allowing cyber threat actors to conduct both quiet espionage…...

2+ mon, 4+ day ago   (348+ words) A new Android spyware strain has been observed being rented out to criminals through Telegram, giving even low-skilled attackers the tools to hijack phones and steal banking credentials, researchers have found. Zimperium's zLabs named the malware RedWing and described it…...

2+ mon, 2+ week ago   (478+ words) The line between ransomware activity and nation-state backed cyber campaigns is blurring, as state-sponsored cyber espionage groups adopt tools and techniques associated with cyber criminals to disguise their intelligence operations, a report has warned. Analysis by cybersecurity researchers at NCC…...

2+ mon, 3+ week ago   (436+ words) A major cybercriminal network involving thousands of infected websites used to distribute malware has been disrupted by an international law enforcement takedown. The action against the SocGholish malware group formed the latest part of Operation Endgame, an ongoing global police…...

2+ mon, 3+ week ago   (397+ words) A North Korean scheme to plant fake IT workers inside Western companies has been exposed from the inside, after one of its operatives tried to infiltrate the very firm that tracks the fraud. Risk intelligence provider Nisos recently detailed how…...