The Necurs Botnet, DarkHydrus and other threat actors are turning to the inconspicuous files. Go to Source

The DoJ said a DPRK spy, Park Jin-hyok, was involved in “a conspiracy to conduct multiple destructive cyberattacks around the world.” Go to Source

The PowerPool gang launched its attack just two days after the zero-day in the Windows Task Scheduler was disclosed. Go to Source

The update includes nine security patches overall. Go to Source

The two bugs were disclosed Wednesday in Cisco Umbrella, the tech giant’s cloud-based security service. Go to Source

The Iran-linked group is using a variant of the data-exfiltration OopsIE trojan to attack a Mideast government entity. Go to Source

The official release of the version includes 40 fixes, seven of which are rated “High.” Go to Source

A Monero cryptomining script is spreading in an ongoing campaign using the recently disclosed critical remote command-execution flaw. Go to Source

Despite the advent to bug bounty programs and enlightened vendors, researchers still complain of abuse, threats and lawsuits. Go to Source

The campaign is believed to bring in close to $22,000 per month for bad actors. Go to Source