Collaborate Disseminate
Latest analysis into the wiper malware that targeted dozens of Ukrainian agencies earlier this month has revealed “strategic similarities” to NotPetya malware that was unleashed against the country’s infrastructure and elsewhere in 2017.
The malware, … Continue reading Experts Find Strategic Similarities b/w NotPetya and WhisperGate Attacks on Ukraine
An active espionage campaign has been attributed to the threat actor known as Molerats that abuses legitimate cloud services like Google Drive and Dropbox to host malware payloads and for command-and-control and the exfiltration of data from targets a… Continue reading Molerats Hackers Hiding New Espionage Attacks Behind Public Cloud Infrastructure
In yet another instance of software supply chain attack, dozens of WordPress themes and plugins hosted on a developer’s website were backdoored with malicious code in the first half of September 2021 with the goal of infecting further sites.
The backd… Continue reading Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and Themes
Researchers have disclosed details of two critical security vulnerabilities in Control Web Panel that could be abused as part of an exploit chain to achieve pre-authenticated remote code execution on affected servers.
Tracked as CVE-2021-45467, the is… Continue reading Critical Bugs in Control Web Panel Expose Linux Servers to RCE Attacks
A previously undocumented firmware implant deployed to maintain stealthy persistence as part of a targeted espionage campaign has been linked to the Chinese-speaking Winnti advanced persistent threat group (APT41).
Kaspersky, which codenamed the rootk… Continue reading Chinese Hackers Spotted Using New UEFI Firmware Implant in Targeted Attacks
The U.S. Treasury Department on Thursday announced sanctions against four current and former Ukrainian government officials for engaging in “Russian government-directed influence activities” in the country, including gathering sensitive information ab… Continue reading U.S. Sanctions 4 Ukrainians for Working with Russia to Destabilize Ukraine
Cisco Systems has rolled out fixes for a critical security flaw affecting Redundancy Configuration Manager (RCM) for Cisco StarOS Software that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and take over vulnerab… Continue reading Cisco Issues Patch for Critical RCE Vulnerability in RCM for StarOS Software
An exploration of zero-click attack surface for the popular video conferencing solution Zoom has yielded two previously undisclosed security vulnerabilities that could have been exploited to crash the service, execute malicious code, and even leak arb… Continue reading Google Details Two Zero-Day Bugs Reported in Zoom Clients and MMR Servers
Microsoft on Wednesday disclosed details of a new security vulnerability in SolarWinds Serv-U software that it said was being weaponized by threat actors to propagate attacks leveraging the Log4j flaws to compromise targets.
Tracked as CVE-2021-35247 … Continue reading Hackers Attempt to Exploit New SolarWinds Serv-U Bug in Log4Shell Attacks
A coordinated law enforcement operation has resulted in the arrest of 11 members allegedly belonging to a Nigerian cybercrime gang notorious for perpetrating business email compromise (BEC) attacks targeting more than 50,000 victims in recent years.
T… Continue reading Interpol Busted 11 Members of Nigerian BEC Cybercrime Gang