scworld.com

5 days ago | scworld.com | Laura French

Attackers leveraged .NET assemblies with bitmap resources to conceal remote access trojans (RATs) in a recent malspam campaign, Palo Alto Networks’ Unit 42 reported Friday.  Unit 42 researchers discovered RATs, including Agent Tesla and Remcos RAT, as well as the XLoader infostealer, hidden in otherwise benign 32-bit .NET files distributed via email and labeled as requests for quotation, purchase orders or other business-related documents.

5 days ago | scworld.com | Shaun Nichols

A known Russian cybercrime outfit has armed itself with a new malware suite that allows for the theft of user accounts and credentials, posing a substantial threat to organizations in the West. The group known as "ColdRiver" has been spotted in the wild using a previously unknown piece of data-stealing malware designated as “LostKeys.” According to the Google Threat Intelligence Group (GTIG) the malware is able to covertly swipe credentials for specific services from target machines.

5 days ago | scworld.com | Steve Zurier

The 10.0 SAP NetWeaver Visual Composer flaw that’s exploited hundreds of servers is worse than originally thought. Researchers found the bug was not merely a file upload issue, but a full remote code execution (RCE). Juan Pablo “JP” Perez-Etchegoyen, chief technology officer at Onapsis, said researchers also recently discovered that threat actors had been probing for vulnerable SAP system since at least Jan. 20 — almost two months earlier than prior reports.

5 days ago | scworld.com | Shaun Nichols

Threat actors are looking to prey on antiquated routers meeting the end of life their life and patch support cycle, according to an alert from the Federal Bureau of Investigations (FBI), which said it has seen a surge in attacks against antiquated network gear that no longer receives regular security updates. The FBI alert said renewed activity against vulnerable routers were observed that have not been updated in some time.

6 days ago | scworld.com | Paul Wagenseil

Companies that align their cybersecurity and business goals are far more likely to achieve cyber resilience, their ability to withstand a major disruption of their information-technology processes and infrastructure. That's the gist of the newly released 2025 Futures Report from LevelBlue, a joint venture between AT&T and WillJam Ventures.