The source code for version 3 of theERMACAndroid banking trojanhas been leaked online, exposing the internals of the malware-as-a-service platform and the operator’s infrastructure. The code base was discovered in an open directory by Hunt.io researchers while scanning for exposed resourcesin March 2024. They located an archive named Ermac 3.0.zip, which contained the malware’s code, … Ler mais
AI for Cybersecurity: Building Trust in Your Workflows In cybersecurity, speed matters, but trust is crucial. AI must ensure both rapid response and reliable decisions to avoid errors and disruption. In cybersecurity, speed matters. But speed without trust can be just as dangerous – if not more so – as no action at all. A … Ler mais
Especialistas em segurança cibernética descobriram um complexo ataque da cadeia de suprimentos que se originou do Python Package Index (PYPI) em uma recente divulgação do ZSCaler AmeaMlabz. O pacote em questão, denominado “TermNColor”, se disfarça de utilitário de cores benignas para terminais Python, mas importa secretamente uma dependência maliciosa chamada “Colorinal”. Essa dependência serve como … Ler mais
A multi-stage malware attack delivered via infected USB devices has been identified, raising concerns over the persistence of cryptomining threats in 2025. Analysts from CyberProof’s Managed Detection and Response (MDR) team discovered that the campaign used DLL search order hijacking and PowerShell to bypass security controls before attempting to install a cryptominer. The malware was … Ler mais
A 26-year old in the UK who claimed to have hacked thousands of websites wassentenced to 20 months in prison after pleading guilty earlier this year. Al-Tahery Al-Mashriky ofRotherham, UK, was arrested in 2022 based on information received from U.S. law enforcement and charged for stealing log in details of millions of Facebook users, and … Ler mais
Over 800 N-able N-central servers remain unpatched against a pair of critical security vulnerabilities tagged as actively exploited last week. N-central is a popular platform used by many managed services providers (MSPs) and IT departments to monitor and manage networks and devices from a centralized web-based console. Tracked as CVE-2025-8875 and CVE-2025-8876, the two flaws … Ler mais
A TLAB Technologies, uma empresa sediada no Cazaquistão especializada em prevenção avançada de ameaças, descobriu uma das primeiras tentativas de phishing conhecidas na região que direcionava clientes do setor público em um recente incidente de segurança cibernética. O ataque alavancou uma página de login falsa profissionalmente criada para colher credenciais do usuário, empregando a API … Ler mais
A significant security incident involving the widely used npm package “eslint-config-prettier” has been uncovered. The package, downloaded more than 3.5 billion times, was compromised on July 18 after its maintainer fell victim to a phishing campaign. ReversingLabs’automated detection system and the Socket research team reported the attack the same day. Malicious versions of the package, … Ler mais
A recent ruling from Germany’s Federal Supreme Court (BGH) has revived a legal battle over whether browser-based ad blockers infringe copyright, raising fears about a potential ban of the tools in the country. The case stems from online media companyAxel Springer’s lawsuit against Eyeo -the maker of the popular Adblock Plus browser extension. Axel Springer … Ler mais
Os pesquisadores de segurança cibernética revelaram o funcionamento interno de um script de exploração direcionado a uma vulnerabilidade crítica de dia zero no upload de metadados compositores visuais da SAP Netweaver, agora designado como CVE-2025-31324. Essa falha decorre de uma verificação de autorização ausente no ponto de extremidade HTTP /Developmentserver /Metadatauploader, permitindo uploads de arquivo … Ler mais
