Over the past two and a half years (January 2023 through June 2025), Cisco Talos Incident Response (Talos IR) has […]
Stopping ransomware before it starts: Lessons from Cisco Talos Incident Response Read More »
When Attackers Get Hired: Today’s New Identity Crisis What if the star engineer you just hired isn’t actually an employee,
You Didn’t Get Phished — You Onboarded the Attacker Read More »
Last week on Malwarebytes Labs: Nexar dashcam video database hacked Roblox introduces age checks to use communication features Give your
A week in security (September 1 – September 7) Read More »
A threat actor possibly of Russian origin has been attributed to a new set of attacks targeting the energy sector
Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign Read More »
A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys Read More »
A hacker cracked into a database of video recordings taken from Nexar-branded cameras, which are built to be placed drivers’
Nexar dashcam video database hacked Read More »
Federal Civilian Executive Branch (FCEB) agencies are being advised to update their Sitecore instances by September 25, 2025, following the
CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation Read More »
The threat actor behind the malware-as-a-service (MaaS) framework and loader called CastleLoader has also developed a remote access trojan known
TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations Read More »
A critical security vulnerability impacting SAP S/4HANA, an Enterprise Resource Planning (ERP) software, has come under active exploitation in the
SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild Read More »
