RSS Reader for Computer Security Articles
Credit to Author: Ryan Maglaque| Date: Fri, 10 Jan 2025 00:00:00 +0000
Our research shows how attackers use platforms like YouTube to spread fake installers via trusted hosting services, employing encryption to evade detection and steal sensitive browser data.
Read MoreCredit to Author: Sarah Pearl Camiling| Date: Thu, 09 Jan 2025 00:00:00 +0000
Our blog entry discusses a fake PoC exploit for LDAPNightmare (CVE-2024-49113) that is being used to distribute information-stealing malware.
Read MoreCredit to Author: Bestin Koruthu| Date: Tue, 07 Jan 2025 00:00:00 +0000
Trend Micro leads the way by mapping its Container Security detection capabilities to the MITRE ATT&CK framework for Containers and contributing real-world attack data.
Read MoreCredit to Author: Aira Marcelo| Date: Thu, 19 Dec 2024 00:00:00 +0000
In this blog entry, Trend Micro’s Managed XDR team discuss their investigation into how the latest variant of NodeStealer is delivered through spear-phishing attacks, potentially leading to malware execution, data theft, and the exfiltration of sensitive information via Telegram.
Read MoreCredit to Author: Feike Hacquebord| Date: Tue, 17 Dec 2024 00:00:00 +0000
APT group Earth Koshchei, suspected to be sponsored by the SVR, executed a large-scale rogue RDP campaign using spear-phishing emails, red team tools, and sophisticated anonymization techniques to target high-profile sectors.
Read MoreCredit to Author: Catherine Loveria| Date: Fri, 13 Dec 2024 00:00:00 +0000
In this blog entry, we discuss a social engineering attack that tricked the victim into installing a remote access tool, triggering DarkGate malware activities and an attempted C&C connection.
Read MoreCredit to Author: Morton Swimmer| Date: Wed, 04 Dec 2024 00:00:00 +0000
Our research into Retrieval Augmented Generation (RAG) systems uncovered at least 80 unprotected servers. We highlight this problem, which can lead to potential data loss and unauthorized access.
Read MoreCredit to Author: Sunil Bharti| Date: Tue, 03 Dec 2024 00:00:00 +0000
Our researchers identified threat actors exploiting misconfigured Docker servers to spread the Gafgyt malware. This threat traditionally targets IoT devices; this new tactic signals a change in its behavior.
Read More