Beware fake AutoCAD, SketchUp sites dropping malware
Malware peddlers are saddling users with the TookPS downloader and the Lapmon and TeviRat backdoors via malicious sites that mimic official ones and ostensibly offer…
Author: Cybernoz
A Bold Move For EU Security
The European Commission has introduced ProtectEU, a comprehensive European Internal Security Strategy aimed at strengthening the security of EU citizens. The strategy lays out a…
Information Security is Not a Permanent Cashcow
I’ve been saying for years that the time of the mediocre security professional is nearly up. We in information security are a bunch of maggots…
Cisco Smart Licensing Utility Flaws Allowed Attackers to Gain Admin Access
Cisco has disclosed critical vulnerabilities in its Smart Licensing Utility software, identified as CVE-2024-20439 and CVE-2024-20440, which could allow unauthenticated, remote attackers to gain administrative…
My First Metal Album | Daniel Miessler
I’ll never forget the first time I “got” metal. Up until then I was into dance music — the current-day rap, if you will. Run…
Data Breaches and ransomware remain top concerns on World Cloud Security Day
For those unfamiliar with World Cloud Security Day, here’s a brief yet essential overview. Celebrated annually on April 3rd, this day serves as a crucial…
Cybercriminals exfiltrate data in just three days
In 56% of Sophos managed detection and response (MDR) and incident response (IR) cases, attackers gained initial access to networks by exploiting external remote services,…
Europol Dismantles Kidflix With 72,000 CSAM Videos Seized in Major Operation
In one of the largest coordinated law enforcement operations, authorities have dismantled Kidflix, a streaming platform that offered child sexual abuse material (CSAM). “A total…
New Triada comes preinstalled on Android devices
New Triada Trojan comes preinstalled on Android devices Pierluigi Paganini April 03, 2025 A new Triada trojan variant comes preinstalled on Android devices, stealing data…
Time and Location | Daniel Miessler
I’ve always been obsessed with time and location. For as long as I can remember, I’ve always been fascinated with how far away things are,…
Building a cybersecurity strategy that survives disruption
Cybersecurity isn’t what it used to be. Attackers are moving quicker, disruptions happen all the time, and many security plans built for more predictable times…
Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign
Apr 03, 2025Ravie LakshmananCybersecurity / Threat Intelligence Threat hunters are warning of a sophisticated web skimmer campaign that leverages a legacy application programming interface (API)…