Collaborate Disseminate
The U.S. Federal Bureau of Investigation (FBI) has disclosed that an unidentified threat actor has been exploiting a previously unknown weakness in the FatPipe MPVPN networking devices at least since May 2021 to obtain an initial foothold and maintain… Continue reading FBI Issues Flash Alert on Actively Exploited FatPipe VPN Zero-Day Bug
Researchers have demonstrated yet another variant of the SAD DNS cache poisoning attack that leaves about 38% of the domain name resolvers vulnerable, enabling attackers to redirect traffic originally destined to legitimate websites to a server under … Continue reading New Side Channel Attacks Re-Enable Serious DNS Cache Poisoning Attacks
The clearnet and dark web payment portals operated by the Conti ransomware group have gone down in what appears to be an attempt to shift to new infrastructure after details about the gang’s inner workings and its members were made public.
According t… Continue reading Experts Expose Secrets of Conti Ransomware Group That Made 25 Million from Victims
Networking equipment company Netgear has released yet another round of patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected syste… Continue reading Critical Root RCE Bug Affects Multiple Netgear SOHO Router Models
Nation-state operators with nexus to Iran are increasingly turning to ransomware as a means of generating revenue and intentionally sabotaging their targets, while also engaging in patient and persistent social engineering campaigns and aggressive bru… Continue reading Microsoft Warns about 6 Iranian Hacking Groups Turning to Ransomware
Cybersecurity agencies from Australia, the U.K., and the U.S. on Wednesday released a joint advisory warning of active exploitation of Fortinet and Microsoft Exchange ProxyShell vulnerabilities by Iranian state-sponsored actors to gain initial access … Continue reading U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet Flaws
A malicious campaign has been found leveraging a technique called domain fronting to hide command-and-control traffic by leveraging a legitimate domain owned by the Myanmar government to route communications to an attacker-controlled server with the g… Continue reading Hackers Targeting Myanmar Use Domain Fronting to Hide Malicious Activities
Israeli spyware vendor Candiru, which was added to an economic blocklist by the U.S. government this month, is said to have reportedly waged “watering hole” attacks against high-profile entities in the U.K. and the Middle East, new findings reveal.
“T… Continue reading Israel’s Candiru Spyware Found Linked to Watering Hole Attacks in U.K and Middle East
Meta, the company formerly known as Facebook, announced Tuesday that it took action against four separate malicious cyber groups from Pakistan and Syria who were found targeting people in Afghanistan, as well as journalists, humanitarian organizations… Continue reading Facebook Bans Pakistani and Syrian Hacker Groups for Abusing its Platform
Cybersecurity researchers have demonstrated yet another variation of the Rowhammer attack affecting all DRAM (dynamic random-access memory) chips that bypasses currently deployed mitigations, thereby effectively compromising the security of the device… Continue reading New Blacksmith Exploit Bypasses Current Rowhammer Attack Defenses