18+ hour, 11+ min ago   (643+ words) North Korea is reportedly expanding its long-running remote IT-worker scheme by using individuals from third countries as interview proxies, according to a joint government alert issued on 31 July and research by cybersecurity firm Flare. The tactic gives North Korean workers…...

1+ day, 2+ hour ago   (713+ words) The approach appears designed to bypass tighter screening of applicants suspected of being directly linked to North Korea. Foreign workers can handle interviews and other early stages of recruitment before positions are transferred to North Korean operatives once employment contracts…...

1+ day, 5+ hour ago   (686+ words) Phishing attacks cost organizations $10.5 billion in 2022. That number went up from the previous year. Despite decades of awareness campaigns, better email filters, and security training, phishing still works. The reason is simple: phishing exploits human psychology, not software vulnerabilities. Phishing…...

1+ day, 14+ hour ago   (379+ words) Pyongyang has significantly scaled up its ongoing campaign to embed fraudulent IT professionals within American and international technology corporations. This sophisticated operation now depends on third-party accomplices in various countries who assist North Korean agents in clearing job interviews and…...

4+ day, 3+ hour ago   (630+ words) A new phishing campaign is moving fake login pages into victims’ browsers. Rather than sending people to a malicious website, its operators use browser-generated blob URLs to assemble the page in local memory, leaving less for security tools to inspect…...

4+ day, 6+ hour ago   (557+ words) A phishing campaign that moves the credential-harvesting page out of attacker-controlled web infrastructure and into the victim’s browser. Unlike ordinary phishing kits, which host cloned login portals on domains that can eventually be detected and disrupted, this campaign delivers malicious…...

4+ day, 10+ hour ago   (593+ words) The campaigns do not require a macOS vulnerability; instead, they abuse user trust by persuading victims to paste attacker-controlled commands into Terminal, sidestepping traditional file-centric protections. However, Russian-language artifacts observed in some samples do not establish attribution to a particular…...

4+ day, 21+ hour ago   (78+ words) scworld.com F5 BIG-IP malware hides web shells in memory to evade detection An In-Depth Guide to Network Security MikroTik routers targeted by active SSH zero-day exploitation Cisco addresses critical vulnerabilities in Nexus 9000 switches and IOS XR HPE patches ArubaOS-CX switches…...

5+ day, 3+ hour ago   (455+ words) A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject malicious JavaScript into their own browsers, in a scheme aimed at people willing to commit fraud. Cisco Talos said in research…...

5+ day, 6+ hour ago   (331+ words) The operation is a browser-based spin on the "ClickFix" social engineering trick, a new Cisco Talos report says. Instead of tricking targets into running operating system commands, the actors talk victims into pasting JavaScript directly into Chrome's address bar or…...