Global security desk · updated coverage of threats, exploits & breaches

Articles

Phishing Kit Disguised as Major Social Login Hits Australian Users

Security researchers have uncovered a polished phishing kit that reproduces the login page of a widely used social media platform with near-pixel accuracy, and…

Linux server ransomware strain emerges as critical enterprise threat

A new file-encrypting malware family has surfaced in active intrusions against enterprise Linux servers, drawing attention from incident response teams across…

Stolen SSL Certificates Turn Trusted Websites Into Phishing Traps

A padlock in a browser address bar has long been treated as a reassuring sign. It confirms that a connection is encrypted, but it does not prove that the…

Password Manager Vulnerability Lets Attackers Seize User Accounts

Researchers have disclosed a serious weakness inside one of the most widely used consumer password managers, a flaw that could let a remote attacker walk away…

IoT Botnet Drives Unprecedented Distributed Denial-of-Service Attacks

A newly identified botnet comprising hundreds of thousands of compromised internet-of-things devices has been blamed for a series of record-breaking…

Chrome Add-on Silently Steals Browser History and Logins

A newly documented malicious Chrome extension has been quietly harvesting browser history, saved passwords, and active session cookies from infected machines…

Credit Bureau Breach Puts Millions Of Consumer Records At Risk

A major data breach at a credit bureau can expose a detailed map of a person’s financial identity. Names and email addresses may be only the beginning. Stolen…

Zero-day in Adobe Reader exploited in targeted attacks

A newly abused flaw in Adobe Reader can turn an apparently ordinary PDF into the first stage of a targeted intrusion. Attackers may send a document that…

Threat Intelligence Report: Ransomware Gangs Adopt New Encryption Tactics

Ransomware operations are changing their use of encryption as defenders improve backup hygiene, deploy endpoint detection, and learn to recognise familiar…

What a Cross-CPU Side-Channel Attack Means for Security

A newly reported class of side-channel attack is drawing attention because it targets behaviour shared by modern processors rather than a single vendor’s…