Laura French

5 days ago | scworld.com | Laura French

Attackers leveraged .NET assemblies with bitmap resources to conceal remote access trojans (RATs) in a recent malspam campaign, Palo Alto Networks’ Unit 42 reported Friday.  Unit 42 researchers discovered RATs, including Agent Tesla and Remcos RAT, as well as the XLoader infostealer, hidden in otherwise benign 32-bit .NET files distributed via email and labeled as requests for quotation, purchase orders or other business-related documents.

6 days ago | scworld.com | Laura French

Cisco patched a maximum severity, CVSS 10.0, vulnerability in its IOS XE Software for wireless LAN controllers (WLCs). The vulnerability, tracked as CVE-2025-20188, could enable a remote, unauthenticated attacker to upload arbitrary files, achieve path traversal and execute arbitrary commands with root privileges on affected devices, according to a Cisco security advisory published Wednesday.

1 week ago | scworld.com | Laura French

Business email compromise (BEC) and funds transfer fraud (FTF) made up 60% of cyber insurance claims in 2024, according to the Coalition 2025 Cyber Claims Report published Wednesday.

1 week ago | scworld.com | Laura French

Mamona ransomware is a simple “commodity” ransomware strain that works completely offline, lowering the bar for entry for less sophisticated attackers, threat intelligence analyst Mauro Eldritch reported in an analysis of the strain published on the ANY.RUN blog Tuesday.

1 week ago | scworld.com | Laura French

The apps aren’t alright. Or at least that is the word amongst security execs at the RSAC 2025 Conference. NowSecure Co-founder Andrew Hoog presented “525,600 Assessments Later: Top Mobile App Risks Since 2022” at the conference in San Francisco on Wednesday, revealing a litany of common issues in apps from the official Apple and Google Play app stores. Several of the top issues affect more than 75% of the apps tested, revealing the extent of the issue.