Source: heimdalsecurity.com – Author: Cristian Neagu Threat actors and security researchers now have access to a database for the notorious RaidForums hacking forums, giving them insight...
Author:
CosmicEnergy: The New Russian-Linked Malware Targets Industrial System – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu A new malware has been discovered in the wild by security researchers. Called CosmicEnergy, the malware is designed to disrupt...
Buhti Ransomware: Blacktail’s Newest Operation Affects Multiple Countries – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu A new ransomware operation emerges. Named “Buhti”, the operation uses the leaked code of the LockBit and Babuk ransomware families...
Three New Zero-Day Vulnerabilities Fixed By Apple – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu Apple resolves three new zero-day vulnerabilities used to compromise iPhones and Macs. The flaws were all found in the multi-platform...
Lemon Gang Pre-Infects 9 Million Android Devices With Malware – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu Nearly 9 million Android-based smartphones, watches, TVs, and TV boxes have been infected with the “Guerrilla” malware, pre-installed on the...
Third-Party Patch Management: A Comprehensive Guide – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu In today’s digital age, software vulnerabilities are on the rise, and cyber threats are becoming more sophisticated. As a result,...
Alert: NextGen Data Breach Puts 1 Million User Identities at Risk – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu NextGen Healthcare, a U.S.-based provider of electronic health record software, notified its clients that threat actors breached its systems and...
Iranian Threat Groups Mango Sandstorm and Mint Sandstorm Join the PaperCut Attack Spree – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu As reported by Microsoft, Iranian state-backed threat groups have joined the ongoing assault targeting vulnerable PaperCut MF/NG print management servers....
Royal Ransomware Targets the City of Dallas in Ransomware Attack – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu Officials from Dallas, Texas declared that Royal Ransomware gang is responsible for a cyberattack that shut down most of the...
What Is Patch Management? Definition, Importance, Key Steps, and Best Practices – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu What Is Patch Management? Patch management is the process of identifying and deploying software updates. It is an important process...
ReconShark – Kimsuky’s Newest Recon Tool – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu Kimsuky, a North Korean hacking group, has been observed employing a new version of its reconnaissance malware called “ReconShark” in...
RTM Locker Ransomware Gang Targets VMware ESXi Servers – Source: heimdalsecurity.com
Source: heimdalsecurity.com – Author: Cristian Neagu RTM Locker is now the most recent enterprise-targeting ransomware operation found to be using a Linux encryptor to target virtual...
Millions of Records With Sensitive Data Leaked by ICICI Bank
ICICI Bank, an Indian multinational valued at more than $76 billion, with over 5,000 branches operating across India and 15 other countries worldwide has leaked millions...
Trigona Ransomware Deployed Through Vulnerable Microsoft SQL Servers
Attackers are breaking into Microsoft SQL (MS-SQL) servers to install Trigona ransomware payloads and encrypt all files. These servers are not well protected and are exposed...
Windows Admins Warned About a Critical MSMQ QueueJumper Vulnerability
Security researchers and experts warn Windows admins about a critical vulnerability discovered in the Windows Message Queuing (MSMQ) middleware service, that can expose hundreds of thousands...
SD Worx Shuts Down its UK & Ireland IT Systems Following Cyberattack
Belgian company SD Worx shut down all IT systems for its UK and Ireland services after suffering a cyberattack. The European HR and payroll management company...
Five New Actively Exploited Vulnerabilities Added by CISA to its KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five new actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. Three of the added vulnerabilities...
Best Patch Management Practices to Follow to Keep Your Business Secured
Patch management is an essential practice for businesses to maintain the security and stability of their IT infrastructure. Patches are released by software vendors to fix...
MSI Breach Claimed By Money Message Ransomware Gang
A recent data breach affecting Taiwanese PC parts maker MSI (Micro-Star International) has been listed on the extortion portal of a new ransomware gang known as...
Elementor Pro Vulnerability Actively Exploited by Threat Actors
Threat actors are actively exploiting a high-severity vulnerability discovered in the popular plugin Elementor Pro. Elementor Pro is a WordPress page builder plugin with multiple functions...
SCCM Alternative for Patch Management
In today’s cybersecurity space, properly patching the machines and servers in your company can make the difference between a well-secured organization and a vulnerable one. SCCM...
Warning: Threat Actors Compromise 3CX Desktop App in a Supply Chain Attack
An ongoing supply chain attack allegedly uses a digitally signed and trojanized variant of the 3CX Voice Over Internet Protocol (VoIP) desktop client to target the...
APT43: A New Cyberthreat From North Korea
A new North Korean cyber operator has been attributed to a series of attacks conducted to gather strategic intelligence aligned with the state’s geopolitical interests. Security...