2+ hour, 53+ min ago   (501+ words) A Magecart campaign dubbed HexMage has compromised more than 40 e-commerce storefronts across at least 15 countries, using Ethereum smart contracts as a resilient delivery mechanism for payment-card skimmers. Because the malicious code is injected into the store itself, every customer who…...

22+ min ago   (381+ words) SMEStreet "Seqrite, the enterprise security arm of Quick Heal Technologies Limited, a global provider of cybersecurity solutions, today disclosed Operation DragonReturn, a sophisticated cyber-espionage campaign targeting India"s taxpayer ecosystem by impersonating the Income Tax Department of the Ministry of…...

48+ min ago   (544+ words) Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers Extortion Group FulcrumSec Claims 86GB Manchester Airports Group Data Theft SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 112 Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch Security Affairs newsletter Round 592 by Pierluigi…...

3+ hour, 15+ min ago   (534+ words) Ponkshe’s investigation began with an APK carrying a lipstick-kiss icon and the name KYSS. On launch, instead of behaving like a conventional app, it pushed the user toward Android settings and requested accessibility access. Once those permissions were granted, the…...

55+ min ago   (393+ words) Among companies that traced attacks to a specific country, China was cited by 52% (up from 46% the previous year) and Russia by 49% (also up from 46%). Iran has emerged as a significant third source — cited by 9% of affected companies, more than double…...

1+ hour, 3+ min ago   (293+ words) The National Cybercrime Threat Analytics Unit has warned of a rise in financial frauds involving malicious pornography apps circulated through social media advertisements, which can take control of Android devices and potentially enable unauthorised financial transactions. The malicious apps, disguised…...

2+ hour, 7+ min ago   (233+ words) Hackers claim to have stolen millions of files, including confidential documents, passwords and financial data. Following the confirmation of an extortion attempt against the state of Berlin, further details have emerged: The hackers who infiltrated Berlin’s state network and stole…...

2+ hour, 41+ min ago   (555+ words) Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers Extortion Group FulcrumSec Claims 86GB Manchester Airports Group Data Theft SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 112 Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch Security Affairs newsletter Round 592 by Pierluigi…...

2+ hour, 2+ min ago   (666+ words) A new Android scam is causing a lot of concern among cybercrime authorities as fraudsters are targeting smartphone users with fake porn themed apps and trying to gain access to their sensitive data, device and even their bank accounts. Apps…...

3+ hour, 35+ min ago   (469+ words) NewsAffinity There is a certain poetry to how this one unravelled. A cybercrime operator linked to Blind Eagle, a group that has spent years phishing Colombian government agencies and businesses, made the mistake every one of their victims makes: they…...