Information Security News Blog
Microsoft is introducing native Sysmon support in Windows, marking a significant shift in the security landscape. Capabilities that once required deploying a separate utility will now be integrated directly into the operating system, available...
A widespread infection of outdated ASUS routers has become the focal point of a new covert campaign that quietly unfolded over the past six months, compromising tens of thousands of devices across the globe....
In recent days it has become apparent that FortiWeb had been accumulating issues the manufacturer chose not to disclose in advance. After Fortinet acknowledged active exploitation of the critical vulnerability CVE-2025-64446 — which allows...
A recently disclosed vulnerability in the 7-Zip archiver is already being weaponized in real-world attacks, according to a statement from NHS England Digital. The notice underscores that the flaw affects a widely used archival...
A new wave of attacks targeting infrastructure built around modern machine-learning systems has been uncovered by the Oligo Security team. Researchers found that a group of threat actors has launched a large-scale operation, dubbed...
Experts in cybersecurity report the emergence of a new automated credential-theft toolkit whose sophistication continues to evolve. In mass-scale schemes, threat actors are increasingly adopting inventive techniques, and one such toolkit — Sneaky 2FA...
Major battery manufacturers are increasingly coming under pressure from extortionist groups, and new reports confirm that criminal interest in this sector continues to grow. This time, the incident affected an LG division that supplies...
A debate over privacy has once again ignited around several budget Samsung smartphones. The controversy stems from the system service AppCloud, preinstalled on Galaxy A, M, and F devices in certain regions. This component...
A major outage in Cloudflare’s infrastructure became an unexpected test of resilience for countless companies. On 18 November, disruptions across the provider’s services repeatedly knocked websites offline worldwide, and some customers attempted to temporarily...
The Xubuntu team has released detailed information about the October incident during which the downloads page at https://xubuntu.org/download/ distributed a malicious file for several days instead of the usual torrent links. According to the...
Cybersecurity experts have detailed a newly identified Android banking trojan called Sturnus, engineered to steal credentials and seize full control of a device—granting attackers the ability to conduct financial fraud with virtually no involvement...
A series of patches proposing a MEMINSPECT mechanism for memory analysis and debugging has been submitted to the Linux kernel developers’ mailing list. The initiative comes from Linaro engineer Evgeny Khristev, who introduced twenty-six...