A sophisticated phishing campaign targeting Microsoft advertisers through malicious Google Ads has been discovered by Malwarebytes. The attack uses deceptive sponsored ads, VPN redirections, and advanced evasion techniques to steal login credentials and 2FA codes. The Brazil-hosted infrast...
A massive brute force attack involving 2.8 million IP addresses is targeting network security devices worldwide, primarily focusing on equipment from Palo Alto Networks, Ivanti, and SonicWall. The campaign, originating mainly from Brazil and other countries, uses compromised routers and Io...
Security researchers have identified active exploitation of critical vulnerabilities in SimpleHelp RMM software, potentially enabling ransomware attacks. The flaws allow information disclosure, privilege escalation, and remote code execution. Attackers are using these vulnerabilities to cr...
A detailed analysis of 2025's major ransomware threats, focusing on LockBit, Lynx, and Virlock malware families. The report examines their attack patterns, targeting strategies, and technical characteristics, while highlighting the importance of security analysis tools and proactive protec...
CISA adds four critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Apache OFBiz, Microsoft .NET Framework, and Paessler PRTG Network Monitor. Federal agencies must patch by February 2025 to address these actively exploited security risks that could l...
