Oktacron - Cyber Security RSS Feeds History

QNAP warns of AgeLocker ransomware attacks on NAS devices

cyware May 03, 2021 Malware and Vulnerabilities

In a security advisory published recently, the company said that its security team has discovered AgeLocker ransomware samples in the wild, with "the potential to affect QNAP NAS devices."

F5 Big-IP Vulnerable to Security-Bypass Bug

cyware May 03, 2021 Malware and Vulnerabilities

The vulnerability specifically exists in one of the core software components of the appliance, the Access Policy Manager (APM), which manages and enforces access policies.

COVID-19 Contact Tracing Breach Impacts Private Information of 72,000 People in Pennsylvania

cyware May 03, 2021 Breaches and Incidents

Employees of a vendor conducting COVID-19 contact tracing in Pennsylvania may have compromised the information of at least 72,000 people, including their exposure status and their sexual orientation.

How Cybercriminals Abuse OpenBullet for Credential Stuffing

cyware May 03, 2021 Threat Actors

As the business of acquiring unique credentials continues to become more lucrative, cybercriminals are growing their attack tools and techniques by abusing legitimate software for nefarious purposes.

Shedding light on the threat posed by shadow admins

cyware May 03, 2021 Expert Blogs and Opinion

If threat actors take control of one of these accounts, they can extend their attack in many ways, perhaps seeking opportunities for lateral movement or privilege escalation whilst staying incognito.

Whistler resort municipality hit by new ransomware operation

cyware May 03, 2021 Breaches and Incidents

During the attack, the Whistler.ca website was hacked to display a message stating that the site was under construction and that visitors should contact support at an included Tor dark web URL.

Researchers develop program that helps assess encryption systems’ vulnerabilities

cyware May 03, 2021 Innovation and Research

A doctoral student at HSE University has proposed a new method to assess vulnerabilities in encryption systems, which is based on a brute-force search of possible options of symbol deciphering.

Researchers Uncover Iranian State-Sponsored Ransomware Operation

cyware May 03, 2021 Threat Actors

Iran's Islamic Revolutionary Guard Corps (IRGC) was found operating a state-sponsored ransomware campaign through an Iranian contracting company called 'Emen Net Pasargard' (ENP).

Toronto hit by ‘potential cyber breach’ from Accellion file transfer software

cyware May 03, 2021 Breaches and Incidents

The City of Toronto says it suffered a “potential cyber breach” from its use of its Accellion FTA file transfer server in January that may have involved the health information of individuals.

Cloud Hosting Provider Swiss Cloud Suffered Ransomware Attack Impacting Server Infrastructure

cyware May 03, 2021 Breaches and Incidents

“On Monday morning, May 3rd, swiss cloud computing ag will inform you again about the current status and outlook,” a statement said. The impacted servers are expected to be restored by next week.

345,000 Legal and Operational Documents from Filipino Solicitor-General's Office Accessed by Unknown Third Party

cyware May 03, 2021 Breaches and Incidents

The files were publicly available since at least February, when TurgenSec said it first discovered the breach and emailed the solicitor-general and the Philippines government about the files.

Magecart scammers aim at restaurants' online delivery systems

cyware May 03, 2021 Identity Theft, Fraud, Scams

The last six months have seen security breaches of five online ordering platforms, exposing some 343,000 payment cards, threat intelligence firm Gemini Advisory said on April 29.

DarkPath scam group loses 134 domains impersonating the WHO

cyware May 03, 2021 Identity Theft, Fraud, Scams

United Nations security experts and security firm Group-IB said they worked together to take down 134 websites operated by a cybercrime group known as DarkPath and tricking users via a fake survey.

Tesla Car Hacked Remotely From Drone via Zero-Click Exploit

cyware May 03, 2021 Malware and Vulnerabilities

The attack, dubbed TBONE, involves the exploitation of two vulnerabilities affecting ConnMan to take full control of the infotainment system of a Tesla without any user interaction.

New Chinese PortDoor Malware Used to Target Russia's Largest Nuclear Submarine Designer

cyware May 03, 2021 Breaches and Incidents

A threat actor believed to be working on behalf of Chinese state-sponsored interests was recently observed targeting a Russia-based defense contractor involved in designing nuclear submarines.

Virgin Active goes offline after sophisticated cyberattack

cyware May 03, 2021 Breaches and Incidents

Virgin Active SA says it was forced to go offline after being targeted by cybercriminals. Forensic experts are probing the extent of the attack to determine if any information was compromised.

Hackers Abuse Excel 4.0 Macros to Deliver ZLoader and Quakbot Malware

cyware May 03, 2021 Malware and Vulnerabilities

The Excel macros are quite old, but hackers are targetting them because it provides paths to access all the powerful functionalities like interaction with the operating system (OS).

Naikon APT Group is Now Using Nebulae Backdoor

cyware May 03, 2021 Threat Actors

Researchers uncovered mischievous activities by the Naikon hacking group, which has been deploying a new backdoor against military organizations in Southeast Asia for over two years.

WeSteal Stealer and WeControl RAT - The New Commodity Malware in Town

cyware May 03, 2021 Malware and Vulnerabilities

Malware curators often peddle their creations in underground forums in creative ways. Now, a new malware is being shamelessly marketed as the leading way to make money in 2021.

UNC2447 Exploiting SonicWall Zero-day to Breach Networks

cyware May 03, 2021 Threat Actors

A financially motivated threat group, tracked as UNC2447, was spotted exploiting a previously disclosed zero-day flaw in SonicWall’s Secure Mobile Access (SMA) appliances.

RotaJakiro Stayed Hidden for Several Years

cyware May 03, 2021 Malware and Vulnerabilities

A new malware backdoor in the town is giving a tough time to researchers by using a double encryption algorithm, a combination of AES and XOR, to stay under the radar.

Ryuk Ransomware Operators have Updated their Attack Techniques

cyware May 03, 2021 Threat Actors

Security researchers from AdvIntel discovered that Ryuk ransomware attacks are now mostly using exposed RDP connections to gain an initial foothold inside a targeted network.

Russia-Linked SVR APT Group Exploiting Five Known Vulnerabilities

cyware May 03, 2021 Threat Actors

A joint advisory by the FBI, CISA, and NSA disclosed that the Russian APT group is exploiting flaws in Fortinet, Zimbra, Citrix, Pulse Secure, and VMware solutions to obtain login credentials.

Codecov’s Code Coverage Tool Hacked

cyware May 03, 2021 Breaches and Incidents

The attackers started to target Bash Uploader on January 31, when they modified the script to deliver the info from the customers’ environment to a server outside Codecov’s infrastructure.

Experian API Leaks Most Americans' Credit Scores

packetstormsecurity May 03, 2021 headline,privacy,bank,data loss,identity

You Should Update Your iPhone And iPad To iOS 14.5.1 Right Away

packetstormsecurity May 03, 2021 headline,phone,flaw,patch,apple

An Ambitious Plan To Tackle Ransomware Faces Long Odds

packetstormsecurity May 03, 2021 headline,malware,cybercrime,fraud,crypto