Fake PDFCandy Websites Spread Malware via Google Ads
CloudSEK uncovers a sophisticated malware campaign where attackers impersonate PDFCandy.com to distribute the ArechClient2 information stealer. Learn how this scam works and how to protect…
Latest Cybersecurity News — Page 3313
View all →
Oxford Mathematician Shows Decisions Six Seconds Before They’re Made
John-Dylan Haynes (Professor at the Bernstein Center for Computational Neuroscience Berlin) shows Marcus Du Sautoy (Professor of Mathematics at the University of Oxford and current…
Microsoft blocks ActiveX by default in Microsoft 365, Office 2024
Microsoft announced it will begin disabling all ActiveX controls in Windows versions of Microsoft 365 and Office 2024 applications later this month. Introduced almost three…
How and Why Threat Hunting Teams Investigate Linux Malware Attacks
Linux cyber threats are less widespread than Windows ones yet it can make them even more dangerous. Underestimated and under-anticipated, they stab endpoints and networks…
Unmasking Xworm Payload Execution Path through Jailbreaking a Malicious JScript Loader
Security researchers are analyzing a sophisticated malware delivery mechanism that uses a JScript loader to deploy different payloads based on the victim’s geographic location. This…
A Fantasy Explanation of Standard vs. Blind SQL Injection
Many in InfoSec get confused about the difference between standard and blind SQL injection. Here’s a simple way to think about it. In both cases you…
New PasivRobber Malware Steals Data From macOS Systems and Applications
A sophisticated Chinese spyware suite dubbed “PasivRobber” that targets macOS devices, with particular focus on harvesting data from communication applications popular among Chinese users. The…
PasivRobber Malware Emerges, Targeting macOS to Steal Data From Systems and Apps
A sophisticated new malware suite targeting macOS, dubbed “PasivRobber,” has been discovered by security researchers. Identified on March 13, 2025, after a suspicious file named…
Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders
Apr 15, 2025Ravie LakshmananSupply Chain Attack / Malware Cybersecurity researchers have disclosed a malicious package uploaded to the Python Package Index (PyPI) repository that’s designed…
Roadmap for commercial adoption of quantum computing gains clarity
Over the past few months, some significant breakthroughs in quantum computing technology have indicated how quickly the technology is evolving. While it remains very much…
Happiness: Creation vs. Collection | Daniel Miessler
I have an observation that I’ve been mulling for the last few days: unhealthy people collect things. Healthy people create things. Naturally, statements like these…
Attackers exploit zero-day flaw in Gladinet CentreStack file-sharing platform
Dive Brief: Huntress on Monday published research that showed exploitation of CVE-2025-30406, a deserialization vulnerability in Gladinet’s CentreStack enterprise file-sharing platform for managed service providers…