CrowdStrike has identified a sophisticated phishing campaign where cybercriminals impersonate recruiters to deceive job seekers, particularly developers, into downloading malware disguised as a recruitment application.
PowerSchool, a leading provider of cloud-based K-12 software, suffered a significant cybersecurity breach that compromised the personal data of millions of students and teachers across North America, prompting concerns about data security in educational institutions.
A series of sophisticated spear-phishing attacks orchestrated by the Chinese threat actor MirrorFace has targeted government bodies, think tanks, and media outlets in Japan from December 2019 to July 2023, employing advanced malware and tactics to steal sensitive information.
The UK’s NCSC and the US CISA have warned Ivanti customers to address two critical vulnerabilities in Ivanti Connect Secure and related products, with evidence of active exploitation linked to cyber threat groups.
The Biden administration has introduced the Cyber Trust Mark, a voluntary cybersecurity labeling program aimed at helping consumers identify secure internet-connected devices amidst rising cyber threats.
A sophisticated multi-stage fraud campaign has been identified, where scammers impersonate government officials to deceive primarily female consumers into revealing their credit card details through remote access software.
