Security researchers are warning of a new information stealer named Erbium being distributed as Malware-as-a-Service (MaaS).

American Airlines discovered it was breached after receiving reports of employee email accounts being used in phishing attacks.

Microsoft has dismantled a malicious campaign in which OAuth applications deployed on compromised cloud tenants were used to distribute spam messages.

ISC has announced patches for multiple high-severity vulnerabilities impacting the BIND DNS software.

Malwarebytes has announced a $100 million funding round that will help it advance products and channel partnerships.

CISA and the FBI have provided information on the cyberattacks that Iranian APTs conducted against the Albanian government in July.

Recorded Future has identified 569 ecommerce domains infected with web skimmers, including 314 infected with a GTM-based skimmer variant.

Russian cyberespionage group UAC-0113 is using dynamic DNS domains masquerading as telecoms providers in ongoing attacks targeting entities in Ukraine.

US government contractors targeted in phishing campaigns claiming to invite them to bid for projects at various government departments.

A group of academic researchers have devised a method of reconstructing text exposed via participants’ eyeglasses and other reflective objects during video conferences.

LastPass says it has concluded its investigation into the August 2022 compromise of the LastPass development environment.

Multiple Netgear router models are vulnerable to arbitrary code execution via a third-party module designed for online game acceleration.