An unidentified threat actor or threat actors gained access to two public facing Web servers at a US federal government agency earlier this year...

An unidentified threat actor or threat actors gained access to two public facing Web servers at a US federal government agency earlier this year...

An unidentified threat actor or threat actors gained access to two public facing Web servers at a US federal government agency earlier this year...

Hackers are actively exploiting a critical flaw in the open source ownCloud platform that allows access to access admin passwords, mail server credentials, and...

Web shells, a common type of post-exploitation tool that provides easy-to-use interface through which to issue commands to a compromised server, have become increasingly...

As software development focuses on continuous integration and deployment, orchestration platforms like Kubernetes have taken off, but that popularity has put them in attackers'...

IntroductionFrom storing simple integers to managing complex workflows, data structures lay the groundwork for robust applications. Among them, the queue often emerges as both...

An enhanced iteration of Kazuar, a relatively obscure but "highly functional" backdoor Trojan, has boosted its capabilities to be more challenging to detect, and...

As machine learning (ML) goes mainstream and gains wider adoption, ML-powered inference applications are becoming increasingly common to solve a range of complex business...

ESET researchers have analyzed two campaigns by the OilRig APT group: Outer Space (2021), and Juicy Mix (2022). Both of these cyberespionage campaigns targeted...

A potentially novel threat actor recently compromised two Middle East-based telecommunications organizations, using two backdoors with previously unseen methods for stealthily loading malicious shellcode...

A Chinese-speaking threat actor that has been skimming credit card numbers off ecommerce sites and point-of-sale service providers in the Asia/Pacific region for more...