Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom Espionage 
CISA Issues Draft Software Bill of Materials Guide for Public Comment 
Linux Malware Delivered via Malicious RAR Filenames Evades Antivirus Detection 
GeoServer Exploits, PolarEdge, and Gayfemboy Push Cybercrime Beyond Traditional Botnets 
Fake Mac fixes trick users into installing new Shamos infostealer 
SonicWall finds no SSLVPN zero-day, links ransomware attacks to 2024 flaw
What’s new: SonicWall has confirmed that recent Akira ransomware attacks exploiting Gen 7 firewalls with SSLVPN enabled are linked to...
Webinar: How to Stop Python Supply Chain Attacks—and the Expert Tools You Need
What’s new: A webinar has been announced focusing on Python supply chain security, highlighting the increasing risk of attacks through...
Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams
What’s new: A report by Infoblox reveals that the malicious ad tech group VexTrio has developed fake VPN and spam...
Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft
What’s new: Researchers have identified a vulnerability in Amazon Elastic Container Service (ECS) dubbed "ECScape," which allows low-privileged containers to...
Akira ransomware abuses CPU tuning tool to disable Microsoft Defender
What’s new: Akira ransomware is exploiting the Intel CPU tuning driver 'rwdrv.sys' to disable Microsoft Defender during attacks. This driver...