A new security issue is putting WordPress-powered websites at risk. Hackers are abusing the “Must-Use” plugins (MU-plugins) feature to hide malicious code and maintain...
Evilginx, a tool based on the legitimate (and widely used) open-source nginx web server, can be used to steal usernames, passwords, and session tokens,...
Mar 27, 2025Ravie LakshmananMobile Security / Malware
An advanced persistent threat (APT) group with ties to Pakistan has been attributed to the creation of a...
For more than five years, Sophos has been investigating multiple China-based groups targeting Sophos firewalls, with botnets, novel exploits, and bespoke malware.With assistance from...
As more and more financial transactions are conducted in digital form each year, financial threats comprise a large piece of the global cyberthreat landscape....
What is the BlackLock ransomware?BlackLock is a relatively new ransomware group. First seen in March 2024, the ransomware operation initially operated under the name...