Collaborate Disseminate
Threat actors originating from the People’s Republic of China are exploiting known vulnerabilities to build a broad network infrastructure of compromised machines worldwide.
The post State-sponsored Chinese threat actors compromise telecom and network … Continue reading State-sponsored Chinese threat actors compromise telecom and network service providers
Cybercriminals are bypassing two-factor authentication using fraudulent online bot services automating phone calls, targeting multiple countries. Read more about how to protect from this threat.
The post Cybercriminals use automated bot to bypass 2FA a… Continue reading Cybercriminals use automated bot to bypass 2FA authentication at wide scale
The internet-facing instances are currently being accessed by attackers who remove the vulnerable databases and leave a ransom note instead.
The post Thousands of unprotected Elasticsearch databases are being ransomed appeared first on TechRepublic.
Continue reading Thousands of unprotected Elasticsearch databases are being ransomed
Karakurt Team attacks are hitting indiscriminate targets in North America and Europe with data theft, requesting a ransom to delete stolen data. Learn more about their methods and how to protect from it.
The post Karakurt Team hits North America and Eu… Continue reading Karakurt Team hits North America and Europe with data theft and extortion
Academic partners of identified American colleges and universities are being warned that their credentials are being sold or sometimes even provided for free on criminal marketplaces and forums. Read more about how to protect yourself from this threat…. Continue reading Compromised academic credentials available on cybercriminal platforms
A recently spotted supply chain attack abused an old but legitimate Python package to deliver a malicious payload. Read more on how the attacker managed to do it and how to protect yourself from it.
The post Old Python package comes back to life and de… Continue reading Old Python package comes back to life and delivers malicious payload
Starting from scratch or maturing a cyber threat intelligence capability is a task that needs several different people with very different skills and competencies. Read more on what competencies can build and make CTI capability a success.
The post How… Continue reading How to develop competency in cyber threat intelligence capabilities
Cybercriminals are finding new ways to trick users into providing their credit card data. A new technique makes use of a fake chatbot to build trust with victims. Learn more about this threat and how to protect yourself from it.
The post New phishing t… Continue reading New phishing technique lures users with fake chatbot
A commercial surveillance company previously exposed for selling a spyware service dubbed “Predator” keeps targeting users and uses 0-day exploits to compromise Android phones. Learn more about how to protect yourself from it.
The post Packaged zero-da… Continue reading Packaged zero-day vulnerabilities on Android used for cyber surveillance attacks
A threat actor has successfully compromised and modified a US business website’s checkout page in order to collect all the credit card data from unsuspecting customers. Read more about how to protect from this threat.
The post Threat actors compromisin… Continue reading Threat actors compromising US business online checkout pages to steal credit card information