Security News

Raw Deel: Corporate spy admits role in espionage at HR software biz Rippling
2025-04-02 21:56

Double-oh-sh... The name's not Bond. It's O'Brien - Keith O'Brien, now-former global payroll compliance manager at the Dublin, Ireland office of HR software-as-a-service maker Rippling.…

RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment
2025-03-26 13:43

The Russian-speaking hacking group called RedCurl has been linked to a ransomware campaign for the first time, marking a departure in the threat actor's tradecraft. The activity, observed by...

Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks
2025-03-26 11:10

Google has released out-of-band fixes to address a high-severity security flaw in its Chrome browser for Windows that has been exploited in the wild as part of attacks targeting organizations in...

Google fixes Chrome zero-day exploited in espionage campaign
2025-03-26 06:42

​Google has fixed a high-severity Chrome zero-day vulnerability exploited to escape the browser's sandbox and deploy malware in espionage attacks targeting Russian organizations. [...]

China-Linked MirrorFace Deploys ANEL and AsyncRAT in New Cyber Espionage Operation
2025-03-18 10:24

Threat hunters have shed more light on a previously disclosed malware campaign undertaken by the China-aligned MirrorFace threat actor that targeted a diplomatic organization in the European Union...

Australia Bans Kaspersky Software Over National Security and Espionage Concerns
2025-02-24 09:57

Australia has become the latest country to ban the installation of security software from Russian company Kaspersky, citing national security concerns. "After considering threat and risk analysis,...

Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign
2025-02-18 09:52

The China-linked threat actor known as Winnti has been attributed to a new campaign dubbed RevivalStone that targeted Japanese companies in the manufacturing, materials, and energy sectors in...

Chinese espionage tools deployed in RA World ransomware attack
2025-02-13 14:31

A China-based threat actor, tracked as Emperor Dragonfly and commonly associated with cybercriminal endeavors, has been observed using in a ransomware attack a toolset previously attributed to...

RA World Ransomware Attack in South Asia Links to Chinese Espionage Toolset
2025-02-13 11:58

An RA World ransomware attack in November 2024 targeting an unnamed Asian software and services company involved the use of a malicious tool exclusively used by China-based cyber espionage groups,...

FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux
2025-02-13 09:11

Threat hunters have shed light on a new campaign targeting the foreign ministry of an unnamed South American nation with bespoke malware capable of granting remote access to infected hosts. The...