Bypassing YARA rules and behavioral detection through symbol randomization, module fragmentation, XOR encoding, and ICMP reverse shell staging

Understand the risks of encrypted AI traffic exposure and explore practical steps users and cloud providers can take to stay secure. Learn more.

As Logitech confirms breach, here’s what you need to know about the Clop gang hack attack — customers and consumers likely impacted by data theft.

"We apologise to our customers and the Internet in general" the web infrastructure company said.

SpiderLabs has recently identified a banking Trojan we dubbed Eternidade Stealer, which is distributed through WhatsApp hijacking and social engineering lures.

A new chain of 5 critical vulnerabilities within Fluent Bit allows attackers to compromise cloud infrastructure

Socket researchers identified a malicious Chrome extension that manipulates Raydium swaps to inject an undisclosed SOL transfer, quietly routing fees ...

The library for web and native user interfaces

AI-driven GitHub Actions expose new prompt-injection supply chain vulnerabilities.

EXECUTIVE SUMMARY At Cyfirma, we are committed to providing up-to-date insights into current threats and the tactics used by malicious...

How Windows infostealers harvest credentials. Technical deep dive into DPAPI decryption, browser data theft, and anti-analysis techniques.

Deep dive into CyberVolk’s new VolkLocker ransomware-as-a-service, its major design flaw, and what it signals for cyber defenders.

Discover how GhostPoster used a malicious PNG icon to infect 50,000 Firefox users and the risks behind seemingly harmless downloads.