The results of an academic experiment reveal that recipients of Facebook messages are much more likely to click on suspicious links.

Owners of Github repositories were the focus of a phishing campaign spreading the Dimnie information-stealing malware.

Carbanak has moved away from its exclusive focus on financial services, branching out to attacks against hospitality and retail.

Carbanak has surfaced again with new campaigns using Google hosted services such as Forms and Sheets as command and control channels.

Banks in Asia and Africa have been targeted with exploits for a zero-day vulnerability in InPage publishing software popular in Arabic-speaking nations.

Microsoft released 14 security bulletins today, six rated critical. Among the fixes is a patch for a Windows kernel zero-day vulnerability disclosed by Google that was being used in attacks by the Sofacy APT gang.

Adobe released an emergency Flash Player update that patches a use-after-free vulnerability being exploited in targeted attacks.

The FruityArmor APT group was using one of the Windows zero days patched by Microsoft last week to escape sandboxes and carry out targeted attacks.

Kaspersky Lab researchers have uncovered the StrongPity APT, a group that uses watering hole attacks to infect machines of users seeking encryption technologies such as WinRAR and TrueCrypt.

Investigating state-sponsored espionage and counterterrorism is one thing. Writing public reports about these activities is another.