Information Security News Blog
Andrew Ferguson, Chairman of the U.S. Federal Trade Commission (FTC), sent a letter to Google CEO Sundar Pichai accusing Gmail of disproportionately filtering emails from Republican fundraising organizations into spam compared to similar Democratic...
The GhostAction attack stands as one of the most significant compromises of the GitHub ecosystem in recent years. Researchers at GitGuardian uncovered a sweeping campaign in which threat actors injected malicious workflow files into...
At the end of August, Canadian fintech company Wealthsimple reported a security incident that affected a small fraction of its clientele. According to the firm, on August 30 it detected the compromise of a...
Experts at eSentire have reported the discovery of a new botnet known as NightshadeC2, which employs unconventional techniques to evade defenses and sandbox environments. The malware is distributed through counterfeit versions of legitimate programs—such...
Havoc Havoc is a modern and malleable post-exploitation command and control framework, created by @C5pider. Features Client Cross-platform UI written in C++ and Qt Modern, dark theme based on Dracula Teamserver Written in Golang Multiplayer Payload...
The threat group TAG-150, which researchers associate with the development of the CastleLoader malware, has expanded its arsenal with a new remote access trojan (RAT) known as CastleRAT. The discovery was reported by Recorded...
The European Commission has fined Google €2.95 billion (approximately $3.5 billion), accusing the company of abusing its dominant position in the digital advertising technology market. According to regulators, Google leveraged its influence to favor...
The hacking scene has once again made headlines with a provocative declaration. A Telegram channel carried a message from a group styling itself as “Scattered LapSus Hunters.” They claim to have gained access to...
The arrest of the alleged administrator of the Russian-speaking forum XSS[.]is, known under the alias Toha, has become a critical inflection point for the entire underground market. According to law enforcement, on July 22,...
The Linux Lite 7.6 distribution, developed in New Zealand, has been released. Built on Ubuntu 24.04.3 and powered by the 6.8 kernel, it retains the Xfce 4.18 desktop environment. The system makes minimal modifications...
Researchers at Eclypsium have recorded a sharp increase in scanning activity targeting outdated and long-abandoned network equipment. The chief danger lies in the fact that many of these attacks are being launched from already-compromised...
Artificial intelligence systems have often been criticized for producing convoluted vulnerability reports and overwhelming open-source developers with irrelevant complaints. Yet researchers from Nanjing University and the University of Sydney have presented a striking counterexample:...