1+ day, 1+ hour ago   (686+ words) Phishing attacks cost organizations $10.5 billion in 2022. That number went up from the previous year. Despite decades of awareness campaigns, better email filters, and security training, phishing still works. The reason is simple: phishing exploits human psychology, not software vulnerabilities. Phishing…...

3+ day, 17+ hour ago   (23+ words) A new TerminalFix campaign is using counterfeit Cloudflare CAPTCHA pages to trick Windows users into pasting PowerShell commands that ultimately turn infected P...

3+ day, 23+ hour ago   (630+ words) A new phishing campaign is moving fake login pages into victims’ browsers. Rather than sending people to a malicious website, its operators use browser-generated blob URLs to assemble the page in local memory, leaving less for security tools to inspect…...

4+ day, 3+ hour ago   (629+ words) Mac users seeking AI tools face a malware trap. Attackers are using fake Claude and ChatGPT installers and sponsored search results to push MacSync, a macOS password stealer. The campaign relies on persuasion instead of a software flaw. A visitor…...

4+ day, 2+ hour ago   (557+ words) A phishing campaign that moves the credential-harvesting page out of attacker-controlled web infrastructure and into the victim’s browser. Unlike ordinary phishing kits, which host cloned login portals on domains that can eventually be detected and disrupted, this campaign delivers malicious…...

4+ day, 5+ hour ago   (593+ words) The campaigns do not require a macOS vulnerability; instead, they abuse user trust by persuading victims to paste attacker-controlled commands into Terminal, sidestepping traditional file-centric protections. However, Russian-language artifacts observed in some samples do not establish attribution to a particular…...

4+ day, 13+ hour ago   (445+ words) Bithumb is moving to prevent damage from malware disguised as artificial intelligence (AI) auto-trading programs or investment analysis tools. Bithumb said on Wednesday it will run a malware damage prevention campaign using "fake AI auto-trading programs and investment analysis tools…...

4+ day, 17+ hour ago   (78+ words) scworld.com F5 BIG-IP malware hides web shells in memory to evade detection An In-Depth Guide to Network Security MikroTik routers targeted by active SSH zero-day exploitation Cisco addresses critical vulnerabilities in Nexus 9000 switches and IOS XR HPE patches ArubaOS-CX switches…...

4+ day, 17+ hour ago   (185+ words) FBI warns of cyber actors deceiving individuals through ‘OAuth consent phishing’ American Hospital Association An FBI alert released Sept. 1 warns of cyber actors impersonating government officials, media and other public individuals on a commercial messaging app to target victims by…...

4+ day, 23+ hour ago   (637+ words) Software developers are being targeted with fake job offers that turn routine coding tests into a path for remote access malware. The campaign uses recruiter personas on LinkedIn and other employment platforms to deliver projects that appear safe enough to…...