Collaborate Disseminate
Google researchers have detailed a widespread watering-hole attack that installed a backdoor on Apple devices that visited Hong Kong-based media and pro-democracy sites.
Continue reading Mac Zero Day Targets Apple Devices in Hong Kong
A bill introduced this week would regulate ransomware response by the country’s critical financial sector. Continue reading Congress Mulls Ban on Big Ransom Payouts
Researchers have a working exploit for the vulnerability (now patched), which allows for unauthenticated RCE and affects an estimated 70,000+ VPN/firewalls.
Continue reading Massive Zero Day Hole Found in Palo Alto Security Appliances
Experts urged users to prioritize patches for Microsoft Exchange and Excel, those favorite platforms so frequently targeted by cybercriminals and nation-state actors. Continue reading Microsoft Nov. Patch Tuesday Fixes Six Zero-Days, 55 Bugs
The Q3 2021 report revealed a 4.5% increase in CVEs associated with ransomware and a 3.4% increase in ransomware families compared with Q2 2021.
Continue reading 12 New Flaws Used in Ransomware Attacks in Q3
The U.S. is seeking the extradition of a Ukrainian man, Yaroslav Vasinskyi, whom they suspect is behind the Kaseya supply-chain attacks and other REvil attacks.
Continue reading REvil Affiliates Arrested; DOJ Seizes $6.1M in Ransom
A new campaign is prying apart a known security vulnerability in the Zoho ManageEngine ADSelfService Plus password manager, researchers warned over the weekend. The threat actors have managed to exploit the Zoho weakness in at least nine global entitie… Continue reading Zoho Password Manager Flaw Torched by Godzilla Webshell
CISA is urging vendors to patch, given the release of public exploit code & a proof of concept tool for bugs that open billions of devices – phones, PCs, toys, etc. – to DoS & code execution. Continue reading BrakTooth Bluetooth Bugs Bite: Exploit Code, PoC Released
NSO Group plans to fight the trade ban, saying it’s “dismayed” and clinging to the mantra that its tools actually help to prevent terrorism and crime.
Continue reading US Bans Trade With Pegasus Spyware Maker
German investigators have identified a deep-pocketed, big-spending Russian billionaire whom they suspect of being a core member of the REvil ransomware gang.
Continue reading Suspected REvil Gang Insider Identified