Category Security

A growing reliance on APIs has fueled security concerns, with nearly all organizations (99%) reporting API-related security issues in the past year. According to the Q1 2025 State of API Security Report by Salt Security, the rapid expansion of API…

Feb 26, 2025Ravie LakshmananLinux / Endpoint Security Universities and government organizations in North America and Asia have been targeted by a previously undocumented Linux malware called Auto-Color between November and December 2024, according to new findings from Palo Alto Networks…

Sensitive patient data stolen from IVF clinic Genea has been published online by the Termite ransomware group. The clinic confirmed in a statement on February 26 that data taken from its systems “appears to have been published externally by the…

More than a year’s worth of internal chat logs from a ransomware gang known as Black Basta have been published online in a leak that provides unprecedented visibility into their tactics and internal conflicts among its members. The Russian-language chats…

In a bold move that underscores the growing tension between tech companies and governments over encryption, end-to-end encrypted (E2EE) instant messaging app Signal is considering leaving Sweden over a proposed law that could compromise user privacy. The Swedish government is…

Organizations today face relentless cyber attacks, with high-profile breaches hitting the headlines almost daily. Reflecting on a long journey in the security field, it’s clear this isn’t just a human problem—it’s a math problem. There are simply too many threats…

A popular breach notification site has added over millions of new passwords and email addresses originally harvested from users via infostealer malware. HaveIBeenPwned (HIBP) founder Troy Hunt said he added 244 million new passwords and 284 million new email accounts…

Feb 24, 2025Ravie LakshmananEndpoint Security / Vulnerability Cybersecurity researchers are warning of a new campaign that leverages cracked versions of software as a lure to distribute information stealers like Lumma and ACR Stealer. The AhnLab Security Intelligence Center (ASEC) said…

A Michigan man has been indicted on wire fraud and aggravated identity theft charges after allegedly purchasing nearly 2500 stolen login credentials from Genesis Market, a now-defunct cybercrime marketplace. The US Justice Department announced the charges last week. According to…

Feb 25, 2025Ravie LakshmananNetwork Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security flaws impacting Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence…