Daily Information Security

DeceptiveDevelopment: North Korean Hackers Target Freelance Developers with Malware-Laced Job Offers

Mai Huong February 22, 2025

Freelance software developers have become the latest targets of a sophisticated cyberattack campaign distributing the malware strains...

PhaaS Upgrade: Darcula 3.0 Automates Payment Card Theft Example of a virtually-generated card from stolen card details

PhaaS Upgrade: Darcula 3.0 Automates Payment Card Theft

Mai Huong February 22, 2025

The malicious platform Darcula, which operates under the Phishing-as-a-Service (PhaaS) model, is preparing to launch its third...

Sensitive Data Access: CISA’s New Hires and Their Pasts DOGE Team Members Tax Access

Sensitive Data Access: CISA’s New Hires and Their Pasts

Mai Huong February 22, 2025

19-year-old DOGE engineer Edward Coristin has secured a position at the U.S. Cybersecurity and Infrastructure Security Agency...

Salt Typhoon: China’s Hackers Spy on US Telecom with JumbledPath

Mai Huong February 22, 2025

The Chinese state-sponsored hacking group Salt Typhoon employs a specialized utility, JumbledPath, to clandestinely monitor network traffic...

Eclipse Hijacked: XLoader’s New Tactic Evades Detection

Mai Huong February 22, 2025

Cybercriminals continue to refine their techniques for concealing malicious software, leveraging legitimate programs to circumvent security mechanisms....

Fingerprinting Users: Google’s New Tracking Defies Anonymity

Mai Huong February 22, 2025

An investigation by WIRED has revealed that Google’s advertising ecosystem enables major brands to access sensitive information...

EU Healthcare Under Attack: Green Nailao Campaign

Mai Huong February 21, 2025

Experts at Orange Cyberdefense have uncovered a new cyber campaign dubbed Green Nailao, which targeted multiple European...

Active Attacks Target Power Pages Zero-Day (CVE-2025-24989)

Mai Huong February 21, 2025

Microsoft has addressed a zero-day privilege escalation vulnerability in Power Pages, which had already been actively exploited...

CISA Warns of Ghost Ransomware Threat

Mai Huong February 21, 2025

A ransomware group operating under the Ghost moniker has infiltrated the systems of corporations and government institutions...

New Obfuscation Technique Bypasses Defenses

Mai Huong February 21, 2025

In January 2025, researchers at Juniper Threat Labs identified a novel JavaScript obfuscation technique that has been...