Non classé

The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting continued development efforts to fine-tune and diversify their arsenal.
« TerraStealerV2 is designed to collect browser credentials, cryptocurrency wallet data, and browser extension information, » Recorded Future Insikt Group said. « TerraLogger, by contrast

The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting continued development efforts to fine-tune and diversify their arsenal.
« TerraStealerV2 is designed to collect browser credentials, cryptocurrency wallet data, and browser extension information, » Recorded Future Insikt Group said. « TerraLogger, by contrast

Cybersecurity researchers have discovered three malicious Go modules that include obfuscated code to fetch next-stage payloads that can irrevocably overwrite a Linux system’s primary disk and render it unbootable.
The names of the packages are listed below –

github[.]com/truthfulpharm/prototransform
github[.]com/blankloggia/go-mcp
github[.]com/steelpoor/tlsproxy

« Despite appearing legitimate,

Cybersecurity researchers have discovered three malicious Go modules that include obfuscated code to fetch next-stage payloads that can irrevocably overwrite a Linux system’s primary disk and render it unbootable.
The names of the packages are listed below –

github[.]com/truthfulpharm/prototransform
github[.]com/blankloggia/go-mcp
github[.]com/steelpoor/tlsproxy

« Despite appearing legitimate,

An Iranian state-sponsored threat group has been attributed to a long-term cyber intrusion aimed at a critical national infrastructure (CNI) in the Middle East that lasted nearly two years.
The activity, which lasted from at least May 2023 to February 2025, entailed « extensive espionage operations and suspected network prepositioning – a tactic often used to maintain persistent access for future

An Iranian state-sponsored threat group has been attributed to a long-term cyber intrusion aimed at a critical national infrastructure (CNI) in the Middle East that lasted nearly two years.
The activity, which lasted from at least May 2023 to February 2025, entailed « extensive espionage operations and suspected network prepositioning – a tactic often used to maintain persistent access for future

The U.S. Department of Justice (DoJ) on Thursday announced charges against a 36-year-old Yemeni national for allegedly deploying the Black Kingdom ransomware against global targets, including businesses, schools, and hospitals in the United States.
Rami Khaled Ahmed of Sana’a, Yemen, has been charged with one count of conspiracy, one count of intentional damage to a protected computer, and one

The U.S. Department of Justice (DoJ) on Thursday announced charges against a 36-year-old Yemeni national for allegedly deploying the Black Kingdom ransomware against global targets, including businesses, schools, and hospitals in the United States.
Rami Khaled Ahmed of Sana’a, Yemen, has been charged with one count of conspiracy, one count of intentional damage to a protected computer, and one

Ireland’s Data Protection Commission (DPC) on Friday fined popular video-sharing platform TikTok €530 million ($601 million) for infringing data protection regulations in the region by transferring European users’ data to China.
« TikTok infringed the GDPR regarding its transfers of EEA [European Economic Area] User Data to China and its transparency requirements, » the DPC said in a statement. « 

Ireland’s Data Protection Commission (DPC) on Friday fined popular video-sharing platform TikTok €530 million ($601 million) for infringing data protection regulations in the region by transferring European users’ data to China.
« TikTok infringed the GDPR regarding its transfers of EEA [European Economic Area] User Data to China and its transparency requirements, » the DPC said in a statement. « 

Run by the team at workflow orchestration and AI platform Tines, the Tines library features pre-built workflows shared by security practitioners from across the community – all free to import and deploy through the platform’s Community Edition.
A recent standout is a workflow that automates monitoring for security advisories from CISA and other vendors, enriches advisories with CrowdStrike

Run by the team at workflow orchestration and AI platform Tines, the Tines library features pre-built workflows shared by security practitioners from across the community – all free to import and deploy through the platform’s Community Edition.
A recent standout is a workflow that automates monitoring for security advisories from CISA and other vendors, enriches advisories with CrowdStrike

The malware loader known as MintsLoader has been used to deliver a PowerShell-based remote access trojan called GhostWeaver.
« MintsLoader operates through a multi-stage infection chain involving obfuscated JavaScript and PowerShell scripts, » Recorded Future’s Insikt Group said in a report shared with The Hacker News.
« The malware employs sandbox and virtual machine evasion techniques, a domain

The malware loader known as MintsLoader has been used to deliver a PowerShell-based remote access trojan called GhostWeaver.
« MintsLoader operates through a multi-stage infection chain involving obfuscated JavaScript and PowerShell scripts, » Recorded Future’s Insikt Group said in a report shared with The Hacker News.
« The malware employs sandbox and virtual machine evasion techniques, a domain

A year after Microsoft announced passkeys support for consumer accounts, the tech giant has announced a big change that pushes individuals signing up for new accounts to use the phishing-resistant authentication method by default.
« Brand new Microsoft accounts will now be ‘passwordless by default,' » Microsoft’s Joy Chik and Vasu Jakkal said. « New users will have several passwordless options for

A year after Microsoft announced passkeys support for consumer accounts, the tech giant has announced a big change that pushes individuals signing up for new accounts to use the phishing-resistant authentication method by default.
« Brand new Microsoft accounts will now be ‘passwordless by default,' » Microsoft’s Joy Chik and Vasu Jakkal said. « New users will have several passwordless options for

Cybersecurity researchers have shed light on a new campaign targeting WordPress sites that disguises the malware as a security plugin.
The plugin, which goes by the name « WP-antymalwary-bot.php, » comes with a variety of features to maintain access, hide itself from the admin dashboard, and execute remote code.
« Pinging functionality that can report back to a command-and-control (C&C) server

Cybersecurity researchers have shed light on a new campaign targeting WordPress sites that disguises the malware as a security plugin.
The plugin, which goes by the name « WP-antymalwary-bot.php, » comes with a variety of features to maintain access, hide itself from the admin dashboard, and execute remote code.
« Pinging functionality that can report back to a command-and-control (C&C) server

Security Operations Center (SOC) teams are facing a fundamentally new challenge — traditional cybersecurity tools are failing to detect advanced adversaries who have become experts at evading endpoint-based defenses and signature-based detection systems. The reality of these “invisible intruders” is driving a significant need for a multi-layered approach to detecting threats,

Security Operations Center (SOC) teams are facing a fundamentally new challenge — traditional cybersecurity tools are failing to detect advanced adversaries who have become experts at evading endpoint-based defenses and signature-based detection systems. The reality of these “invisible intruders” is driving a significant need for a multi-layered approach to detecting threats,