The Security Service of Ukraine (SSU) today revealed that the country is the target of an ongoing “wave of hybrid warfare” conducted by Russia-linked malicious cyber actors. click here to read full Article Read...
Threat actors can leverage a weakness in Microsoft Defender to determine in which folders to plant malware. The knowledge of the list of scanning exceptions allows attackers to know where to store their malicious...
ZecOps found a way to block and simulate an iOS restart operation, a technique that could be used to trick users into thinking they rebooted their device, while maintaining access for a malware. click...
The AvosLocker ransomware group has coughed up a free decryptor after learning that one of their victims was a U.S. police department. Hacker revealed that the taxpayer money is generally hard to get and...
Attackers don’t seem to care about getting caught anymore. We have seen an increase in the temerity of cyberattacks by nation-states, such as the attack by Russian threat actors on SolarWinds. click here to...
Recently, an exploit was publicly released for Log4Shell vulnerability (CVE-2021-44228) in the Apache Log4j Java-based logging utility. Soon after, cybercriminals started abusing the flaw to spread malware. click here to read full Article Read...
One year after the discovery of the 2021 SolarWinds supply chain compromise, security researchers report two clusters of suspected Russian attack activity targeting global businesses and governments. click here to read full Article Read...
The emails offer recipients a free Omicron PCR test, which they claim will allow them to circumvent limitations. The emails purport to come from the U.K’s National Health Service (NHS). click here to read...
Knowledge about vulnerabilities and exploits can command a high price on underground forums because being able to take advantage of them can be very profitable for cybercriminals. click here to read full Article Read...
The FBI issued a private industry notification to warn industry partners that Iran-linked threat actors are attempting to buy stolen information belonging to US businesses and organizations abroad. click here to read full Article...
Iran-linked hackers were found conducting extensive password spraying attacks against Office 365 accounts of defense technology and global maritime firms in the U.S. and Israel. The group attempts to gain access to commercial satellite...
Kaspersky unearthed a cyberespionage campaign exploiting a zero-day flaw in Windows to deliver MysterySnail malware and steal data. A connection to a Chinese-speaking APT was also established. Experts recommend organizations stay proactive and ready...
The malicious code deployed by attackers disables the hostguard service, a Huawei Cloud Linux agent process that “detects security issues, protects the system, and monitors the agent.” click here to read full Article Read...
Four distinct infiltrations by suspected Chinese-state-sponsored threat actors stole gigabytes of data from the corporate mail server of major Afghan telecom provider Roshan within the past year. click here to read full Article Read...
Hackers have stolen more than $29 million worth of cryptocurrency assets from Cream Finance, a decentralized finance (DeFi) platform. C.R.E.A.M. Finance is a decentralized lending protocol for individuals, institutions and protocols to access financial...
Malicious hackers are impersonating delivery services and sending phishing text messages to Britons to trick them into downloading Flubot malware, according to UK mobile network Three. click here to read full Article Read more...
