Threats
Microsoft Targets Critical Outlook Zero-Day Flaw
Microsoft's Patch Tuesday for March 2023 includes patches for more than 70 vulnerabilities, including zero-day flaws in Outlook and in Windows SmartScreen.
According to Crowdstrike researchers, 40...
BlackMamba PoC Malware Uses AI to Avoid Detection
HYAS researchers recently developed proof-of-concept (PoC) malware that leverages AI both to eliminate the need for command and control (C2) infrastructure and to generate new malware on the fly in o...
What is Cyber Threat Hunting? Definition, Techniques & Steps
Threat hunting starts with a pretty paranoid premise: That your network may have already been breached and threat actors may be inside waiting for an opportunity to strike.
Sadly, that turns out to...
Cloudflare Blocks Record DDoS Attack as Threats Surge
Cloudflare mitigated dozens of hyper-volumetric DDoS attacks last weekend, most of them ranging from 50 to 70 million requests per second (RPS) – and the largest one exceeding 71 million RPS.
"Thi...
Microsoft Patch Tuesday Includes Three Exploited Zero-Day Vulnerabilities
Microsoft's February 2023 Patch Tuesday fixes 75 vulnerabilities, nine of them rated critical, and three (all rated important) that are being exploited.
"This is only the second Patch Tuesday of t...
Hackers Use RMM Software to Breach Federal Agencies
Cybercriminals recently breached U.S. federal agencies using remote monitoring and management (RMM) software as part of a widespread campaign.
The malicious campaign began in June 2022 or earlier a...
Threat Groups Distributing Malware via Google Ads
Security researchers are warning that Google Ads are being actively leveraged to distribute malware to unsuspecting victims searching for software downloads.
On January 20, CronUp researcher Germán...
Cybercriminals Use VSCode Extensions as New Attack Vector
Microsoft's Visual Studio Code integrated development environment (IDE) is used by as much as 75% of developers, so any security issue has widespread implications. And Aqua Nautilus researchers have d...
ChatGPT’s Dark Side: An Endless Supply of Polymorphic Malware
CyberArk researchers are warning that OpenAI's popular new AI tool ChatGPT can be used to create polymorphic malware.
"'s impressive features offer fast and intuitive code examples, which are incre...
Microsoft Patch Tuesday Fixes 11 Critical Vulnerabilities, One Zero-Day
Microsoft's first Patch Tuesday of 2023 addresses 98 vulnerabilities, more than twice as many as last month – including one zero-day flaw that's being actively exploited, as well as 11 critical flaws...
