Exploits

Threat actors weaponize OAuth redirection logic to deliver malware

An ongoing phishing campaign is abusing the OAuth authentication redirection mechanism to avoid triggering conventional email and browser defenses, Microsoft researchers have revealed. The attackers...

CISA report updates findings on RESURGE malware attacks

The Cybersecurity and Infrastructure Security Agency Feb. 26 released a report that updates findings from last year on RESURGE malware...

AI-driven hacking uses booking.com and Microsoft Teams in vibe coding and “flat pack” malware campaigns

AI is helping cybercriminals to rapidly assemble malware with flat-pack efficiency. It’s almost like buying a sofa from Ikea, and perhaps even easier to...

CISA Issues Updated RESURGE Malware Analysis Highlighting a Stealthy but Active Threat

The Cybersecurity and Infrastructure Security Agency has released an updated Malware Analysis Report (MAR) revealing new findings on RESURGE, a highly sophisticated malware implant that...

1.2 Million Impacted As Heartless Hackers Attack Cancer Center In Ransomware Breach

Even in the world of cyber-criminals, there are some targets that simply won't earn you any admiration. One such case is a cyber attack...

Microsoft Warns OAuth Redirect Abuse Delivers Malware to Government Targets

Microsoft on Monday warned of phishing campaigns that employ phishing emails and OAuth URL redirection mechanisms to bypass conventional phishing defenses implemented in email...

Ransomware is now less about malware and more about impersonation

This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Identity has replaced malware as the biggest threat vector opening the door...

DIY hackers are turning to ‘flat-pack’ malware components to speed up attacks and cut costs

(Image credit: Getty Images) Share this article Join the conversation Add us as a preferred source on Google Subscribe to our newsletter Cyber criminals are using “modular malware components”...

CISA Alerts On RESURGE Malware Targeting Ivanti Connect Secure Vulnerabilities

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about the RESURGE malware targeting Ivanti Connect 

Latest articles