144 Austin, Texas, United States, April 9th, 2026, CyberNewswire Built by a veteran security team and led by a former Google and Mandiant executive, Mallory delivers intelligence that drives action for enterprise security teams. Mallory is launching an AI-native threat …
î „Ravie Lakshmananî ‚Apr 09, 2026Malware / Windows Security A new threat cluster known as UAT-10362 has been identified in spear-phishing campaigns targeting Taiwanese NGOs and suspected universities. This cluster is associated with a new Lua-based malware called LucidRook. According to Cisco …
UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns Read More »
Presented by Capital One Data security continues to be a critical area in enterprise cybersecurity, with data breaches often involving unmanaged data sources or “shadow data.” This highlights a lack of fundamental data awareness within organizations. Despite the availability of …
Closing the data security maturity gap: Embedding protection into enterprise workflows Read More »
The group known as APT28, also called Forest Blizzard, has been identified in a recent campaign involving compromised MikroTik and TP-Link routers. These routers were manipulated to serve as malicious infrastructure as part of a cyber espionage effort that began …
Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign Read More »
The Revolution of NeuBird AI Falcon in Production Operations The tech industry mantra “move fast and break things” coined by Facebook, now Meta, is being challenged by NeuBird AI with its latest launch of Falcon, an autonomous production operations agent. …
î „Ravie Lakshmananî ‚Apr 05, 2026Malware / DevSecOps A recent discovery by cybersecurity researchers has unveiled 36 malicious npm packages posing as legitimate Strapi CMS plugins. These packages contain hidden payloads designed to exploit Redis and PostgreSQL, deploy reverse shells, harvest credentials, …
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants Read More »
The Evolution of Open Cybersecurity Schema Framework (OCSF) In the realm of cybersecurity, a significant transformation is taking place beneath the surface. While discussions have revolved around models, copilots, and agents, there is a growing consensus around the Open Cybersecurity …
OCSF explained: The shared data language security teams have been missing Read More »
A cyber threat actor aligned with China has been targeting European government and diplomatic organizations since mid-2025, following a period of minimal activity in the region. This campaign has been attributed to TA416, which is associated with various other activity …
China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing Read More »
After the inadvertent exposure of a 59.8 MB source map file in version 2.1.88 of the Anthropic AI npm package, security researcher Chaofan Shou discovered that 512,000 lines of unobfuscated TypeScript were now public. This leak included sensitive information such …
î „Ravie Lakshmananî ‚Apr 01, 2026Email Security / Artificial Intelligence The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new phishing campaign in which the cybersecurity agency itself was impersonated to distribute a remote administration tool known as …
CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails Read More »
