Collaborate Disseminate
Romanian law enforcement authorities have announced the arrest of two individuals for their roles as affiliates of the REvil ransomware family, dealing a severe blow to one of the most prolific cybercrime gangs in history.
The suspects are believed to … Continue reading Suspected REvil Ransomware Affiliates Arrested in Global Takedown
At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho’s ManageEngine ADSelfService Plus self-service password management and … Continue reading Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit
A previously undocumented initial access broker has been unmasked as providing entry points to three different threat actors for mounting intrusions that range from financially motivated ransomware attacks to phishing campaigns.
BlackBerry’s research a… Continue reading BlackBerry Uncovers Initial Access Broker Linked to 3 Distinct Hacker Groups
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of critical vulnerabilities affecting Philips Tasy electronic medical records (EMR) system that could be exploited by remote threat actors to extract sensitive personal data f… Continue reading Critical Flaws in Philips TASY EMR Could Expose Patient Data
In what’s yet another instance of supply chain attack targeting open-source software repositories, two popular NPM packages with cumulative weekly downloads of nearly 22 million were found to be compromised with malicious code by gaining unauthorized a… Continue reading Two NPM Packages With 22 Million Weekly Downloads Found Backdoored
Ukraine’s premier law enforcement and counterintelligence agency on Thursday disclosed the real identities of five individuals allegedly involved in digital intrusions attributed to a cyber-espionage group named Gamaredon, linking the members to Russia… Continue reading Ukraine Identifies Russian FSB Officers Hacking As Gamaredon Group
The U.S. government on Thursday announced a $10 million reward for information that may lead to the identification or location of key individuals who hold leadership positions in the DarkSide ransomware group or any of its rebrands.
On top of that, the… Continue reading U.S. Offers $10 Million Reward for Information on DarkSide Ransomware Group
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published a catalog of vulnerabilities, including from Apple, Cisco, Microsoft, and Google, that have known exploits and are being actively exploited by malicious cyber actors, in add… Continue reading U.S. Federal Agencies Ordered to Patch Hundreds of Actively Exploited Flaws
Cisco Systems has released security updates to address vulnerabilities in multiple Cisco products that could be exploited by an attacker to log in as a root user and take control of vulnerable systems.
Tracked as CVE-2021-40119, the vulnerability has b… Continue reading Hardcoded SSH Key in Cisco Policy Suite Lets Remote Hackers Gain Root Access
Cybersecurity researchers have disclosed a security flaw in the Linux Kernel’s Transparent Inter Process Communication (TIPC) module that could potentially be leveraged both locally as well as remotely to execute arbitrary code within the kernel and ta… Continue reading Critical RCE Vulnerability Reported in Linux Kernel’s TIPC Module