Collaborate Disseminate
Europol, the European Union’s premier law enforcement agency, has announced the arrest of a third Romanian national for his role as a ransomware affiliate suspected of hacking high-profile organizations and companies and stealing large volumes of sens… Continue reading Ransomware Affiliate Arrested in Romania; 51 Stolen Data Brokers Arrested in Ukraine
Apple on Monday released updates to iOS, macOS, tvOS, and watchOS with security patches for multiple vulnerabilities, including a remote jailbreak exploit chain as well as a number of critical issues in the Kernel and Safari web browser that were firs… Continue reading Latest Apple iOS Update Patches Remote Jailbreak Exploit for iPhones
Google has rolled out fixes for five security vulnerabilities in its Chrome web browser, including one which it says is being exploited in the wild, making it the 17th such weakness to be disclosed since the start of the year.
Tracked as CVE-2021-4102… Continue reading Update Google Chrome to Patch New Zero-Day Exploit Detected in the Wild
A previously undocumented, financially motivated threat group has been connected to a string of data theft and extortion attacks on over 40 entities between September and November 2021.
The hacker collective, which goes by the self-proclaimed name Kar… Continue reading Karakurt: A New Emerging Data Theft and Cyber Extortion Hacking Group
Infection chains associated with the multi-purpose Qakbot malware have been broken down into “distinct building blocks,” an effort that Microsoft said will help to proactively detect and block the threat in an effective manner.
The Microsoft 365 Defen… Continue reading Microsoft Details Building Blocks of Widely Active Qakbot Banking Trojan
Threat actors are actively weaponizing unpatched servers affected by the newly identified “Log4Shell” vulnerability in Log4j to install cryptocurrency miners, Cobalt Strike, and recruit the devices into a botnet, even as telemetry signs point to explo… Continue reading Apache Log4j Vulnerability — Log4Shell — Widely Under Active Attack
The Apache Software Foundation has released fixes to contain an actively exploited zero-day vulnerability affecting the widely-used Apache Log4j Java-based logging library that could be weaponized to execute malicious code and allow a complete takeove… Continue reading Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk
Details have emerged about what’s the first Rust-language-based ransomware strain spotted in the wild that has already amassed “some victims from different countries” since its launch last month.
The ransomware, dubbed BlackCat, was disclosed by Malwa… Continue reading BlackCat: A New Rust-based Ransomware Malware Spotted in the Wild
As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins and 15 Epsilon Framework themes.
WordPress security company Wordfence, whi… Continue reading 1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses
Russia has stepped up its censorship efforts in the country by fully blocking access to the Tor web anonymity service, coinciding with the ban of six virtual private network (VPN) operators, as the government continues its efforts to control the inter… Continue reading Russia Blocks Tor Privacy Service in Latest Censorship Move