Thawing the permafrost of ICEDID Summary
ICEDID is a malware family first described in 2017 by IBM X-force researchers and is associated with the theft of login credentials, banking information, and…
Latest Cybersecurity News — Page 25
View all →
Malicious npm packages evade install-script defenses at runtime
An ongoing npm malware campaign involving the ‘indexed-btree’ package shows how threat actors bypass supply chain defenses by hiding malicious code in a package’s normal…
When Ransomware Targets AI Models: Defending the AI/ML Recovery Chain
By Crystal Morin Ransomware crews have always followed the money. For years, that meant targets like banks and hospitals organizations with high-value assets and sensitive…
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
Ravie LakshmananSep 19, 2026Vulnerability / Linux The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to…
Leaky Vessels: Deep Dive on Container Escape Vulnerabilities
New vulnerabilities have been revealed in the runC command line tool (CVE-2024-21626) and in BuildKit (CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653). These flaws pose a risk of…
Not sleeping anymore: SOMNIRECORD’s wake-up call
Introduction While monitoring the REF2924 activity group, Elastic Security Labs researchers identified a new malware family written in C++ that we refer to as SOMNIRECORD.…
Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts
Microsoft has resolved a known issue that causes incorrect alerts warning that Defender Antivirus was turned off after installing recent updates. In a Windows release…
Business Survival in the Age of AI
Adam Ochayon, VP of Strategy, Oasis Security Deploying agentic AI in the enterprise is no longer optional – it’s fundamental to survival. And the main unlock to ensure…
ChatGPT Phishing Campaign Targets Both Work and Personal OpenAI Accounts
Threat actors are increasingly impersonating OpenAI’s ChatGPT service in credential-phishing campaigns, exploiting the growing use of generative AI across both enterprise and personal environments. A…
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
An attacker copied about 170 of CrowdSec’s private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said…
Critical Vulnerabilities in Ivanti Exploited In-The-Wild
February 9, 2024 updateOn February 8, 2024, Ivanti released an advisory for a new authentication bypass high severity vulnerability, CVE-2024-22024 impacting Ivanti Connect Secure (9.x,…
REF2924: how to maintain persistence as an (advanced?) threat
Preamble In recent months, there has been a noticeable shift in the nature of the incidents being tracked under REF2924. Initially, the attacker employed custom,…