Collaborate Disseminate
Cisco’s response to the latest SD-WAN and firewall defects has been fast, but the harder question is how long sophisticated actors had a head start — and what’s already compromised.
The post Cisco’s latest vulnerability spree has a more troubling pattern underneath appeared first on CyberScoop.
Continue reading Cisco’s latest vulnerability spree has a more troubling pattern underneath
Kwamaine Jerell Ford allegedly impersonated an adult film star and tricked his high-profile victims into sharing their iCloud credentials and MFA codes under false pretenses.
The post Zero lessons learned: Convicted scammer allegedly ran another athlete-focused phishing scam from federal prison appeared first on CyberScoop.
Google’s research report on ransomware activity last year underscores how cybercrime is evolving and clouding a collective understanding of its full impact and scale.
The post The ransomware economy is shifting toward straight-up data extortion appeared first on CyberScoop.
Continue reading The ransomware economy is shifting toward straight-up data extortion
The botnet, which compromised routers and IoT devices in 163 countries, claimed about 369,000 victims and $5.8 million from its cybercriminal customers, officials said.
The post Authorities takedown global proxy network SocksEscort appeared first on CyberScoop.
Continue reading Authorities takedown global proxy network SocksEscort
Angelo Martino is accused of playing both sides — committing attacks and conducting ransomware negotiations on some of the same cases on behalf of his former employer.
The post Feds say another DigitalMint negotiator ran ransomware attacks and extorted $75 million appeared first on CyberScoop.
Researchers said the threat group behind the campaign is associated with ShinyHunters, an outfit that’s previously stolen data from Salesforce instances for extortion attempts.
The post Salesforce issues new security alert tied to third customer attack spree in six months appeared first on CyberScoop.
The vendor said six of the 83 vulnerabilities it addressed this month are more likely to be exploited.
The post Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zero-days appeared first on CyberScoop.
Attackers can exploit the defect in the widely deployed pac4j with relative ease, but researchers haven’t observed active exploitation in the wild.
The post Critical defect in Java security engine poses serious downstream security risks appeared first on CyberScoop.
Continue reading Critical defect in Java security engine poses serious downstream security risks
Attackers have turned AI into a “force multiplier” for the country’s expansive scheme to get and keep operatives hired at global companies, researchers said.
The post Microsoft warns North Korean threat groups are scaling up fake worker schemes with generative AI appeared first on CyberScoop.
The 43-year-old Russian national ran a ransomware operation that impacted more than 1,000 victims globally. The conspiracy netted more than $39 million in extortion payments.
The post Phobos ransomware leader pleads guilty, faces up to 20 years in prison appeared first on CyberScoop.
Continue reading Phobos ransomware leader pleads guilty, faces up to 20 years in prison