European authorities take down prolific cybercrime VPN service

Officials arrested the alleged administrator of First VPN, seized its servers and domains. Europol said the service appeared in almost every major recent cybercrime investigation.

The post European authorities take down prolific cybercrime VPN service appeared first on CyberScoop.

Continue reading European authorities take down prolific cybercrime VPN service→

Attackers hit vulnerabilities hard last year, making exploits the top entry point for breaches

Verizon’s annual Data Breach Investigations Report uncovered a surge of exploited vulnerabilities, and a growing lack of critical defect remediation industrywide.

The post Attackers hit vulnerabilities hard last year, making exploits the top entry point for breaches appeared first on CyberScoop.

Continue reading Attackers hit vulnerabilities hard last year, making exploits the top entry point for breaches→

Microsoft disrupts cybercrime service that abused software verification systems en masse

Fox Tempest, a financially-motivated threat group, allowed ransomware operators and other cybercriminals to slip malware-laced software past security controls.

The post Microsoft disrupts cybercrime service that abused software verification systems en masse appeared first on CyberScoop.

Continue reading Microsoft disrupts cybercrime service that abused software verification systems en masse→

Interpol leads cybercrime crackdown across 13 countries in Middle East, North Africa

Operation Ramz resulted in 201 arrests and disrupted phishing services, malware and financial scams.

The post Interpol leads cybercrime crackdown across 13 countries in Middle East, North Africa appeared first on CyberScoop.

Continue reading Interpol leads cybercrime crackdown across 13 countries in Middle East, North Africa→

Cisco zero-day under ongoing attack by persistent threat group

The threat group behind the attacks is also linked to a series of recently disclosed vulnerabilities in the vendor’s firewalls and SD-WAN systems.

The post Cisco zero-day under ongoing attack by persistent threat group appeared first on CyberScoop.

Continue reading Cisco zero-day under ongoing attack by persistent threat group→

Major tech manufacturer Foxconn confirms cyberattack hit North American factories

The ransomware group Nitrogen claimed responsibility for the attack and said it stole 8 terabytes of data spanning more than 11 million files belonging to the company’s top customers.

The post Major tech manufacturer Foxconn confirms cyberattack hit North American factories appeared first on CyberScoop.

Continue reading Major tech manufacturer Foxconn confirms cyberattack hit North American factories→

Microsoft addresses 137 vulnerabilities in May’s Patch Tuesday, including 13 rated critical

The high volume of vulnerabilities reflects a growing trend researchers have been anticipating as artificial intelligence models are deployed to find previously uncovered defects in code.

The post Microsoft addresses 137 vulnerabilities in May’s Patch Tuesday, including 13 rated critical appeared first on CyberScoop.

Continue reading Microsoft addresses 137 vulnerabilities in May’s Patch Tuesday, including 13 rated critical→

Pressure mounts on Canvas as data leak extortion deadline looms

Attackers affiliated with The Com are threatening to leak data from more than 8,800 school systems if Instructure doesn’t pay a ransom.

The post Pressure mounts on Canvas as data leak extortion deadline looms appeared first on CyberScoop.

Continue reading Pressure mounts on Canvas as data leak extortion deadline looms→

Google spotted an AI-developed zero-day before attackers could use it

Researchers found artifacts in the code that proved AI was heavily involved. A prominent cybercrime group planned to exploit the zero-day en masse for financial gain.

The post Google spotted an AI-developed zero-day before attackers could use it appeared first on CyberScoop.

Continue reading Google spotted an AI-developed zero-day before attackers could use it→

Ivanti customers confront yet another actively exploited zero-day

Attackers are hitting a frequent target in the network edge space, intruding victim networks through a defect in a widely used mobile endpoint security product.

The post Ivanti customers confront yet another actively exploited zero-day appeared first on CyberScoop.

Continue reading Ivanti customers confront yet another actively exploited zero-day→