Network security best practices for the holidays
Tips to better protect your network while you take some well-deserved time off.
Similar Posts
Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software
Bys sThese are the tools of the trade Sophos detected in use by cybercriminals over 2024
North Korean Hackers Target Web3 with Nim Malware and Use ClickFix in BabyShark Campaign
Bys sThreat actors with ties to North Korea have been observed targeting Web3 and cryptocurrency-related businesses with malware written in the Nim programming language, underscoring a constant evolution of their tactics. “Unusually for macOS malware, the threat actors employ a process injection technique and remote communications via wss, the TLS-encrypted version of the WebSocket protocol,”
Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
Bys sA use-after-free in the Linux kernel’s AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst said in research published September 22. The flaw, tracked as CVE-2026-80521 (CVSS score: 7.8), was fixed upstream on August 6, but Ubuntu has not shipped the patch for its 26.04, 24.04, or 22.04…
Hungarian and Romanian Police Detain Young Hackers over Fake Threat Calls
Bys sHungarian Conservative reports: Hungarian police, in cooperation with Romanian authorities, have taken action against four young hackers suspected of making false and intimidating phone calls, the National Bureau of Investigation of the Rapid Response Police announced on Monday. The investigation began in mid-July last year after several police units received reports within days of one……
New Flaw in IDEs Like Visual Studio Code Lets Malicious Extensions Bypass Verified Status
Bys sA new study of integrated development environments (IDEs) like Microsoft Visual Studio Code, Visual Studio, IntelliJ IDEA, and Cursor has revealed weaknesses in how they handle the extension verification process, ultimately enabling attackers to execute malicious code on developer machines. “We discovered that flawed verification checks in Visual Studio Code allow publishers to add functionality
UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine
Bys sThe Computer Emergency Response Team of Ukraine (CERT-UA) has revealed a new set of cyber attacks targeting Ukrainian institutions with information-stealing malware. The activity is aimed at military formations, law enforcement agencies, and local self-government bodies, particularly those located near Ukraine’s eastern border, the agency said. The attacks involve distributing phishing emails