Online collaboration apps have become critical for business, yet many organisations haven’t corrected the security errors they made when rushing to implement these tools at the start of the pandemic.
The threat actors are distributing their malware via the Play Store, and already had over 30,000 installations as of March.
AquaSec analysed a sample of 1.25 million GitHub repositories and found that about 37,000 of them are vulnerable to RepoJacking, including companies such as Google and Lyft.
Experts say that cybersecurity skills and a whole-of-organisation approach can go a long way to tackling misinformation threats.
The threat actor created fake personas on Twitter for researchers at a non-existent security firm.
A third-party audit reveals new MOVEit vulnerabilities, for which Progress Software has issued patches.
While currently used to push adware, the campaign can redirect users to other types of malware, such as banking trojans to steal credentials and financial information or ransomware.
As exploits against vulnerabilities increase overall, Palo Alto Networks' research unit has observed a jump in attempts to mimic ChatGPT through squatting domains.
Attackers can abuse the UEFI firmware to inject executable malware code into the Windows kernel, compromising systems.
Microsoft and a few American intelligence agencies have detected malware of Chinese origin deployed in critical infrastructure systems in Guam and elsewhere in the United States.
Cybercrime gang Lemon Group has managed to get malware known as Guerrilla preinstalled on the devices.
Mobile users in the US are 1.3 times more likely to be struck by lightning than malware, new research has found.
A growing tendency by business units and workgroups to sign up for cloud services without asking their IT organization creates serious risks for enterprises.
A week after Microsoft pulled a Patch Tuesday update that crippled some Windows 7 PCs, the company has yet to provide a working fix for either the original flaw or the resulting problem.
Although Microsoft has pulled a patch from Windows Update that crippled some computers, it is still pushing a truncated version of the security update that contained the flawed fix.
