Programmatically create hunting rules for deserialization exploitation with multiple keywords (e.g. cmd.exe) gadget chains (e.g. CommonsCollection) object types (e.g. ViewState, Java, Python Pickle, PHP) encodings (e.g. Base64, raw) rule types…
Google are introducing virtual credit cards to the Chrome browser for users of their services in the US. We take a look at what’s in store.
The post Virtual credit cards coming to Chrome: What you need to know appeared first on Malwarebytes Labs.
The facial recognition and surveillance company was sued for earning off the back of people’s faceprints that were taken without consent.
The post Clearview AI banned from selling facial recognition data in the US appeared first on Malwarebytes Labs.
A ransomware group with an Iranian operational connection has been linked to a string of file-encrypting malware attacks targeting organizations in Israel, the U.S., Europe, and Australia.
Cybersecurity firm Secureworks attributed the intrusions to a …
The European Commission on Wednesday proposed new regulation that would require tech companies to scan for child sexual abuse material (CSAM) and grooming behavior, raising worries that it could undermine end-to-end encryption (E2EE).
To that end, onl…
CISA and the FBI are sharing information about the US attribution of cyberattacks on SATCOM networks that targeted Ukraine but spilled over into other European countries.
The post Cyberattacks on SATCOM networks attributed to Russian threat actors appeared first on Malwarebytes Labs.
At least one group of threat actors is using the recently patched vulnerability in F5 BIG-IP to wipe the file system of vulnerable devices.
The post F5 BIG-IP vulnerability is now being used to disable servers appeared first on Malwarebytes Labs.
This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users an…
Lincoln College is the first US college or university ransomware affected so badly that it could not cope and had to close shop.
The post College closes down after ransomware attack appeared first on Malwarebytes Labs.
Cybersecurity researchers have disclosed a massive campaign that’s responsible for injecting malicious JavaScript code into compromised WordPress websites that redirects visitors to scam pages and other malicious websites to generate illegitimate traf…
