Microsoft Warns About Phishing Attacks by Russia-linked HackersMicrosoft on Monday revealed it took steps to disrupt phishing operations undertaken by a "highly persistent threat actor" whose...
Day: August 20, 2022
New Evil PLC Attack Weaponizes PLCs to Breach OT and Enterprise Networks
New Evil PLC Attack Weaponizes PLCs to Breach OT and Enterprise NetworksCybersecurity researchers have elaborated a novel attack technique that weaponizes programmable logic controllers (PLCs) to...
Friday Squid Blogging: The Language of the Jumbo Flying Squid
Friday Squid Blogging: The Language of the Jumbo Flying SquidThe jumbo flying squid (Dosidicus gigas) uses its color-changing ability as a language: In 2020, however, marine...
Unified Threat Management: The All-in-One Cybersecurity Solution
Unified Threat Management: The All-in-One Cybersecurity SolutionUTM (Unified threat management) is thought to be an all-in-one solution for cybersecurity. In general, it is a versatile software...
RubyGems Makes Multi-Factor Authentication Mandatory for Top Package Maintainers
RubyGems Makes Multi-Factor Authentication Mandatory for Top Package MaintainersRubyGems, the official package manager for the Ruby programming language, has become the latest platform to mandate multi-factor...
North Korea Hackers Spotted Targeting Job Seekers with macOS Malware
North Korea Hackers Spotted Targeting Job Seekers with macOS MalwareThe North Korea-backed Lazarus Group has been observed targeting job seekers with malware capable of executing on...
Malicious Browser Extensions Targeted Over a Million Users So Far This Year
Malicious Browser Extensions Targeted Over a Million Users So Far This YearMore than 1.31 million users attempted to install malicious or unwanted web browser extensions at...
July Tesla Sales Crashed in Germany and Norway: Not Even on Chart
July Tesla Sales Crashed in Germany and Norway: Not Even on ChartLooking at July I was at first surprised by German news about Fiat having a...
Researchers Link Multi-Year Mass Credential Theft Campaign to Chinese Hackers
Researchers Link Multi-Year Mass Credential Theft Campaign to Chinese HackersA Chinese state-sponsored threat activity group named RedAlpha has been attributed to a multi-year mass credential theft...
Lean Security 101: 3 Tips for Building Your Framework
Lean Security 101: 3 Tips for Building Your FrameworkCobalt, Lazarus, MageCart, Evil, Revil — cybercrime syndicates spring up so fast it's hard to keep track. Until…they...
Cybercriminals Developing BugDrop Malware to Bypass Android Security Features
Cybercriminals Developing BugDrop Malware to Bypass Android Security FeaturesIn a sign that malicious actors continue to find ways to work around Google Play Store security protections,...
Goodbye “Kill Chains”, Hello “Attack Sequences”
Goodbye “Kill Chains”, Hello “Attack Sequences”A few years ago at the RSA Conference I co-presented on the top cloud attack “kill chains”. Shawn Harris @infotechwarrior and...
Hackers Using Bumblebee Loader to Compromise Active Directory Services
Hackers Using Bumblebee Loader to Compromise Active Directory ServicesThe malware loader known as Bumblebee is being increasingly co-opted by threat actors associated with BazarLoader, TrickBot, and...
Chrome browser gets 11 security fixes with 1 zero-day – update now!
Chrome browser gets 11 security fixes with 1 zero-day – update now!Don't delay - patch today.Leer másNaked SecurityDon't delay - patch today.
Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware
Researchers Detail Evasive DarkTortilla Crypter Used to Deliver MalwareA .NET-based evasive crypter named DarkTortilla has been used by threat actors to distribute a broad array of commodity malware...
US offers reward “up to $10 million” for information about the Conti gang
US offers reward “up to $10 million” for information about the Conti gangWanted - Reward Offered - Five unknown individuals (plus a man with a weird...
China-backed APT41 Hackers Targeted 13 Organisations Worldwide Last Year
China-backed APT41 Hackers Targeted 13 Organisations Worldwide Last YearThe Chinese advanced persistent threat (APT) actor tracked as Winnti has targeted at least 13 organizations geographically spanning...
Cybercrime Group TA558 Targeting Hospitality, Hotel, and Travel Organizations
Cybercrime Group TA558 Targeting Hospitality, Hotel, and Travel OrganizationsA financially motivated cybercrime group has been linked to an ongoing wave of attacks aimed at hospitality, hotel,...
Apple patches double zero-day in browser and kernel – update now!
Apple patches double zero-day in browser and kernel – update now!Double 0-day exploits - one in WebKit (to break in) and the other in the kernel...
Google Cloud Blocks Record DDoS attack of 46 Million Requests Per Second
Google Cloud Blocks Record DDoS attack of 46 Million Requests Per SecondGoogle's cloud division on Thursday disclosed it mitigated a series of HTTPS distributed denial-of-service (DDoS)...
S3 Ep96: Zoom 0-day, AEPIC leak, Conti reward, healthcare security [Audio + Text]
S3 Ep96: Zoom 0-day, AEPIC leak, Conti reward, healthcare security [Audio + Text]Latest episode - listen now (or read if you prefer!)Leer másNaked SecurityLatest episode -...
DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities
DoNot Team Hackers Updated its Malware Toolkit with Improved CapabilitiesThe Donot Team threat actor has updated its Jaca Windows malware toolkit with improved capabilities, including a...
FORTINET Global Threat Landscape Report 2022 – A Semiannual Report by FortiGuard Labs
Another half-year through unprecedented times has passed. But as unique as these times may feel, we continue to see familiar exploits, names, and attacks taking up...