Cybersecurity News - Page 86

11 state-sponsored APT groups from North Korea, Iran, Russia, and China have exploited this vulnerability for cyber espionage.

The fraud campaign utilized a range of deceptive tactics to evade detection and bypass Android security restrictions.

The malware targets various data, including browser credentials, digital wallet details, clipboard contents, and system data.

The leaked logs reveal apparent connection between BlackBasta’s leader Oleg Nefedov and Russian officials.

The group has changed its TTPs, returning to the ANEL backdoor, previously believed to have been abandoned after 2018.

The attack is dead simple to execute and requires no authentication, the researchers note.

The BRUTED framework employs a multi-step attack process to identify and compromise edge network devices.

Malicious packages targeted cloud client functionalities for major services, including Alibaba Cloud, AWS, and Tencent Cloud.

The attack, which occurred sometime before March 14, 2025, involved a threat actor modifying the code of the tj-actions/changed-files GitHub Action.

In brief: Microsoft, Apple fix zero-days, LockBit ransomware dev extradited to the US, and more.