Phison and Cigent unveiled a co-developed SSD platform that uses mechanisms built directly into the SSD's firmware to defend against ransomware and data theft. In the event of an attack, the drives automatically encrypt and shield data. This year, everybody will be able to access these self-defense drives, show more ...
Bizarro is a new banking trojan that is spreading through Europe and most of South America, trying to steal customer financial details and mobile crypto wallets. If you have not come across one before, banking trojans are a type of malware used by cybercriminals to steal banking credentials and other information show more ...
In the first quarter of 2021, cybercriminals sent 52 million malicious messages using storage services such as Office 365, Azure, OneDrive, SharePoint, G-Suite, and Firebase. During the pandemic, cybercriminals have been capitalizing on the rapid transition to cloud-based business services by concealing their email show more ...
Forenza, an Israeli startup, has created a new subscription-based data platform to assist police departments and private investigators in solving crimes by using open sources, digital forensic evidence, and business intelligence from public social media channels. Police departments can view and coordinate public show more ...
DarkSide, the group responsible for the notorious ransomware attack used in the attack on Colonial Pipeline, generated national panic and skyrocketing gas prices. While they announced a retirement, their platforms are still operational. By May 23, the DarkSide cybercriminal group agreed to provide decryptors for all show more ...
An ongoing malware campaign that utilizes the AutoHotkey (AHK) scripting language to deliver a variety of RATs, including LimeRAT, AsyncRAT, Houdini, Vjw0rm, and Revenge RAT, has been discovered. Since February, at least 4 separate versions have been identified. According to Morphisec, The RAT distribution starts show more ...
Living off the Land–type attacks, which use legitimate programs or operating system features to cause harm, are nothing new, but with experts keeping track of LotL-susceptible modern software, cybercriminals have had to innovate. Researchers Jean-Ian Boutin and Zuzana Hromcova spoke about one such innovation, the show more ...
One of the oldest scams around — the fake job interview that seeks only to harvest your personal and financial data — is on the rise, the FBI warns. Here’s the story of a recent LinkedIn impersonation scam that led to more than 100 people getting duped, and one almost-victim who decided the job offer show more ...
Two-thirds of senior-level decision-makers who participated in a 2019 survey said they didn’t believe the SMBs for which they’re responsible would fall victim to a digital attack.
Proper heap grooming can give an attacker full control of this heap overflow vulnerability (CVE-2021-21160), and as a result, could allow it to be turned into arbitrary code execution.
The SolarWinds attack campaign included theft of sensitive source code from tech companies and has helped focus the White House on efforts to secure the software supply chain.
The Alaska department's website was taken offline Monday evening and will be unavailable to the public until further details are known about the security incident, department officials say.
A top Apple exec has said that Mac malware has now exceeded Apple's level of tolerance, and framed security as the reason for keeping iPhones locked to the App Store, during testimony is a lawsuit.
42Crunch, an API security startup, has raised $17 million in its Series A funding round led by Energy Impact Partners. Adara Ventures also participated in this funding round.
In 2020, there were 193 billion credential stuffing attacks globally, with 3.4 billion hitting financial services organizations specifically – an increase of more than 45% YOY in the sector.
A domain-joined model allows a single compromised administrator account to obtain ADFS keys and certificates that would also provide access to cloud services including Azure and Office 365.
Backers included Greenspring Associates, March Capital, NGP Capital, and Wipro Ventures, alongside existing investors Ten Eleven Ventures, Intel Capital, Dell Technologies Capital, and others.
The goal is for the emails to replicate internal processes to a point that it becomes highly unlikely the users will be able to determine that they are interacting with a non-legitimate request.
The company has confirmed that tens of thousands of customer records, including financial information, were exposed to external actors due to the Codecov supply chain breach.
Left unchecked, a BGP route hijack or leak can cause a drastic surge in misdirected internet traffic that eventually leads to global congestion and a Denial of Service (DoS).
Since the DarkSide ransomware operation shut down a week ago, multiple affiliates have complained about not getting paid for past services and issued a claim for bitcoins in escrow at a hacker forum.
The European operations of its subsidiary Daihatsu Diesel Company were hit by an attack, while the Toyota subsidiary Auto Parts Manufacturing Mississippi also revealed a ransomware attack.
CNA Financial, one of the largest U.S. insurance companies, paid $40 million in late March to regain control of its network after a ransomware attack, according to people familiar with the matter.
The Java-based STRRAT was distributed in a massive spam campaign, the malware shows ransomware-like behavior of appending the file name extension .crimson to files without actually encrypting them.
The attack on the Doncaster-based insurance company was just a few days after the Colonial Pipeline's initial compromise on May 7 and one day before the ransomware gang claimed to be shutting up shop.
Microsoft notes that from December 2020 to February 2021, the Phorpiex bot loader was encountered in 160 countries, with Mexico, Kazakhstan, and Uzbekistan being the top targeted countries.
Security analysts at ESET identified 158 privacy and security issues in 58 Android stalkerware apps that could lead to account and device hijacking, data manipulation, and remote code execution, among others.
Researchers claim that the Cobalt Strike penetration testing kit, along with the Metasploit framework, was abused to host over 25% of malicious C2 servers deployed in 2020. Do you have a prepared strategy to protect organizations from this threat?
Researchers uncovered a new botnet malware purposed for DDoS attacks on gaming and other sectors. The malware operators created a Discord server and YouTube channel for its demonstration.
In the first week of May, security researchers raised an alarm about a decade-old supply chain flaw in the PHP package manager that could have put millions of websites at risk.
Red Hat Security Advisory 2021-2085-01 - Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. Issues addressed include a bypass vulnerability.
Red Hat Security Advisory 2021-2077-01 - Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Issues addressed include buffer overflow, denial of service, and memory leak vulnerabilities.
Red Hat Security Advisory 2021-2070-01 - Red Hat Single Sign-On 7.4 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. This release of Red Hat Single Sign-On 7.4.7 serves as a replacement for Red Hat show more ...
Spotweb-Develop version 1.4.9 suffers from a cross site scripting vulnerability.
DELL dbutil_2_3.sys version 2.3 arbitrary write to local privilege escalation exploit.
WordPress WP Statistics plugin versions 13.0 to 13.0.7 suffer from a remote unauthenticated blind SQL injection vulnerability.
A missing length check in libX11 allows data from LookupColor requests to mess up the client-server communication protocol and inject malicious X server requests.
This Metasploit module scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin by chaining this bug with another post-auth arbitrary-file-write vulnerability to get code execution. As a result, an unauthenticated attacker can execute show more ...
Mozilla Firefox versions 88.0.1 and below suffer from an issue that allows for execution of a file holding arbitrary code just by downloading it.
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.
Microsoft on Thursday warned of a "massive email campaign" that's pushing a Java-based STRRAT malware to steal confidential data from infected systems while disguising itself as a ransomware infection. "This RAT is infamous for its ransomware-like behavior of appending the file name extension .crimson to files without actually encrypting them," the Microsoft Security Intelligence team said in a
U.S. insurance giant CNA Financial reportedly paid $40 million to a ransomware gang to recover access to its systems following an attack in March, making it one the most expensive ransoms paid to date. The development was first reported by Bloomberg, citing "people with knowledge of the attack." The adversary that staged the intrusion is said to have allegedly demanded $60 million a week after
Yes, you read that correctly. FORTY MILLION DOLLARS.
