Collaborate Disseminate
A new cyber mercenary hacker-for-hire group dubbed “Void Balaur” has been linked to a string of cyberespionage and data theft activities targeting thousands of entities as well as human rights activists, politicians, and government officials around th… Continue reading Researchers Uncover Hacker-for-Hire Group That’s Active Since 2015
The operators of TrickBot trojan are collaborating with the Shathak threat group to distribute their wares, ultimately leading to the deployment of Conti ransomware on infected machines.
“The implementation of TrickBot has evolved over the years, with… Continue reading TrickBot Operators Partner with Shathak Attackers for Conti Ransomware
A state-sponsored threat actor allegedly affiliated with Iran has been linked to a series of targeted attacks aimed at internet service providers (ISPs) and telecommunication operators in Israel, Morocco, Tunisia, and Saudi Arabia, as well as a minist… Continue reading Iran’s Lyceum Hackers Target Telecoms, ISPs in Israel, Saudi Arabia, and Africa
A new zero-day vulnerability has been disclosed in Palo Alto Networks GlobalProtect VPN that could be abused by an unauthenticated network-based attacker to execute arbitrary code on affected devices with root user privileges.
Tracked as CVE-2021-3064… Continue reading Palo Alto Warns of Zero-Day Bug in Firewalls Using GlobalProtect Portal VPN
An ongoing mobile spyware campaign has been uncovered snooping on South Korean residents using a family of 23 malicious Android apps to siphon sensitive information and gain remote control of the devices.
“With more than a thousand South Korean victim… Continue reading Researchers Discover PhoneSpy Malware Spying on South Korean Citizens
As many as 13 security vulnerabilities have been discovered in the Nucleus TCP/IP stack, a software library now maintained by Siemens and used in three billion operational technology and IoT devices that could allow for remote code execution, denial-o… Continue reading 13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment
Cybersecurity researchers on Tuesday disclosed 14 critical vulnerabilities in the BusyBox Linux utility that could be exploited to result in a denial-of-service (DoS) condition and, in select cases, even lead to information leaks and remote code execu… Continue reading 14 New Security Flaws Found in BusyBox Linux Utility for Embedded Devices
Microsoft has released security updates as part of its monthly Patch Tuesday release cycle to address 55 vulnerabilities across Windows, Azure, Visual Studio, Windows Hyper-V, and Office, including fixes for two actively exploited zero-day flaws in Exc… Continue reading Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs
Robinhood on Monday disclosed a security breach affecting approximately 7 million customers, roughly a third of its user base, that resulted in unauthorized access of personal information by an unidentified threat actor.
The commission-free stock tradi… Continue reading Robinhood Trading App Suffers Data Breach Exposing 7 Million Users’ Information
The U.S. government on Monday charged a Ukrainian suspect, arrested in Poland last month, with deploying REvil ransomware to target multiple businesses and government entities in the country, including perpetrating the attack against software company K… Continue reading U.S. Charges Ukrainian Hacker for Kaseya Attack; Seizes $6 Million from REvil Gang