Cybersecurity

PJobRAT makes a comeback, takes another crack at chat apps – Sophos News

In 2021, researchers reported that PJobRAT – an Android RAT first observed in 2019 – was targeting Indian military personnel by imitating various dating...

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

Mar 30, 2025Ravie LakshmananVulnerability / Zero-Day The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has shed light on a new malware called RESURGE that has...

Stealing user credentials with evilginx – Sophos News

Evilginx, a tool based on the legitimate (and widely used) open-source nginx web server, can be used to steal usernames, passwords, and session tokens,...

Operation ForumTroll exploits zero-days in Google Chrome

In mid-March 2025, Kaspersky technologies detected a wave of infections by previously unknown and highly sophisticated malware. In all cases, infection occurred immediately after...

Sitecore “thumbnailsaccesstoken” Deserialization Scans (and some new reports) CVE-2025-27218

On March 6th, Searchlight Cyber published a blog revealing details about a new deserialization vulnerability in Sitecore . Sitecore calls itself a "Digital Experience...

Arrests in Tap-to-Pay Scheme Powered by Phishing – Krebs on Security

Authorities in at least two U.S. states last week independently announced arrests of Chinese nationals accused of perpetrating a novel form of tap-to-pay fraud...

I, for one, welcome our new robot overlords! • Graham Cluley

In episode 43 of The AI Fix, our hosts discover a robot that isn’t terrifying, a...

Kill List – Darknet Diaries

Full Transcript The dark web is full of mystery. Some of it’s just made up though. Chris Monteiro wanted to see...

Katharine Hayhoe: The most important climate equation

The atmospheric scientist makes a compelling case for a head-to-heart-to-hands connection as...

Weekly Update 444

It's time to fly! 🇬🇧 🇮🇸 🇮🇪 That's two new flags (or if you're on Windows and can't see flag emojis, that's two new...

The future of MFA is clear – but is it here yet? – Sophos News

Over the years the industry has tied itself in knots in its attempts at augmenting (or upgrading) the password, using all sorts of confusing...

YouTube Game Cheats Spread Arcane Stealer Malware to Russian-Speaking Users

Mar 20, 2025Ravie LakshmananMalware / Threat Analysis YouTube videos promoting game cheats are being used to deliver a previously undocumented stealer malware called Arcane likely...

Recent articles