NFCShare Android malware spreads via fake banking app updates on GitHub
…The malware steals the card number, type, expiry date, and a 4-digit PIN entered by the victim under the pretense of a security step, and exfiltrates it to the attacker’s…
Search
New GhostLock tool abuses Windows API to block file access
…The researcher says that many security products and behavioral detection systems focus on detecting mass file writes or encryption operations. GhostLock primarily generates large numbers of legitimate file open requests, making it…
Credit card theft campaign abuses Stripe to host stolen payment info
…Test every layer before attackers do Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen. The Picus whitepaper shows how breach and…
Chinese APT deploys new malware to keep access to hacked networks
…Test every layer before attackers do Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen. The Picus whitepaper shows how breach and…
WordPress malware campaign hides payloads in Steam profiles
…By leveraging Valve's platform, the attacker avoids maintaining a separate C2 infrastructure and evades traditional detection methods. Since the campaign was first uncovered in July 2025, GoDaddy security engineers have found…
Foxconn confirms cyberattack claimed by Nitrogen ransomware gang
…mass-exploited in "Sorry" ransomware attacks Breach Cyberattack Electronics Extortion Foxconn Nitrogen ransomware North America Ransomware Sergiu Gatlan Sergiu is a news reporter who has covered the latest cybersecurity and technology developments…
Canvas login portals hacked in mass ShinyHunters extortion campaign
…has breached education technology giant Instructure again, this time exploiting a vulnerability to deface Canvas login portals for hundreds of colleges and universities. The defacements, which were visible for roughly 30 minutes…
What 345 Days of Untested Exposure Looks Like at a Bank
…Testers establish what is actually exploitable, and what the downstream impact is when it is. Sprocket Security operates the continuous model on this principle. The attestation that follows reflects what was tested…
To show you the most relevant results, we’ve omitted some entries very similar to those already shown. Repeat the search with the omitted results included.