Collaborate Disseminate
The cybercriminal group is distancing itself from its previous branding by shifting tactics and tools once again in an aim to continue to profit from its nefarious activity. Continue reading Evil Corp Pivots LockBit to Dodge U.S. Sanctions
The info-stealing trojan used SMS messages and lifted contact credentials to spread with unprecedented speed across Android devices globally since December 2020. Continue reading International Authorities Take Down Flubot Malware Network
Threat actors already are exploiting vulnerability, dubbed ‘Follina’ and originally identified back in April, to target organizations in Russia and Tibet, researchers said. Continue reading Microsoft Releases Workaround for ‘One-Click’ 0Day Under Active Attack
The malvertiser’s use of PowerShell could push it beyond its basic capabilities to spread ransomware, spyware or steal data from browser sessions, researchers warn. Continue reading ChromeLoader Browser Hijacker Provides Gateway to Bigger Threats
Cisco Talos discovered eight vulnerabilities in the Open Automation Software, two of them critical, that pose risk for critical infrastructure networks. Continue reading Critical Flaws in Popular ICS Platform Can Trigger RCE
Actors claiming to be the defunct ransomware group are targeting one of Akami’s customers with a Layer 7 attack, demanding an extortion payment in Bitcoin. Continue reading Cybergang Claims REvil is Back, Executes DDoS Attacks
2022’s DBIR also highlighted the far-reaching impact of supply-chain breaches and how organizations and their employees are the reasons why incidents occur. Continue reading Verizon Report: Ransomware, Human Error Among Top Security Risks
Microsoft Word also leveraged in the email campaign, which uses a 22-year-old Office RCE bug. Continue reading Snake Keylogger Spreads Through Malicious PDFs
More than 380,000 of the 450,000-plus servers hosting the open-source container-orchestration engine for managing cloud deployments allow some form of access. Continue reading 380K Kubernetes API Servers Exposed to Public Internet
Privilege escalation flaw discovered in the Jupiter and JupiterX Core Plugin affects more than 90,000 sites. Continue reading Critical Vulnerability in Premium WordPress Themes Allows for Site Takeover