Collaborate Disseminate
Details have emerged about a new cyber espionage campaign directed against the aerospace and telecommunications industries, primarily in the Middle East, with the goal of stealing sensitive information about critical assets, organizations’ infrastructu… Continue reading Iranian Hackers Abuse Dropbox in Cyberattacks Against Aerospace and Telecom Firms
Google has announced plans to automatically enroll about 150 million users into its two-factor authentication scheme by the end of the year as part of its ongoing efforts to prevent unauthorized access to accounts and improve security.
In addition, the… Continue reading Google to turn on 2-factor authentication by default for 150 million users
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday released an advisory regarding multiple security vulnerabilities affecting all versions of Honeywell Experion Process Knowledge System C200, C200E, C300, and ACE controllers th… Continue reading Multiple Critical Flaws Discovered in Honeywell Experion PKS and ACE Controllers
Apache has issued patches to address two security vulnerabilities, including a path traversal and file disclosure flaw in its HTTP server that it said is being actively exploited in the wild.
“A flaw was found in a change made to path normalization in … Continue reading Apache Warns of Zero-Day Exploit in the Wild — Patch Your Web Servers Now!
Cybersecurity researchers on Tuesday revealed details of a previously undocumented UEFI (Unified Extensible Firmware Interface) bootkit that has been put to use by threat actors to backdoor Windows systems as early as 2012 by modifying a legitimate Win… Continue reading Researchers Discover UEFI Bootkit Targeting Windows Computers Since 2012
Chinese cyber espionage group APT41 has been linked to seemingly disparate malware campaigns, according to fresh research that has mapped together additional parts of the group’s network infrastructure to hit upon a state-sponsored campaign that takes … Continue reading New Study Links Seemingly Disparate Malware Attacks to Chinese Hackers
Law enforcement agencies have announced the arrest of two “prolific ransomware operators” in Ukraine who allegedly conducted a string of targeted attacks against large industrial entities in Europe and North America since at least April 2020, marking t… Continue reading Ransomware Hackers Who Attacked Over 100 Companies Arrested in Ukraine
A newly discovered data exfiltration mechanism employs Ethernet cables as a “transmitting antenna” to stealthily siphon highly-sensitive data from air-gapped systems, according to the latest research.
“It’s interesting that the wires that came to prote… Continue reading Creating Wireless Signals with Ethernet Cable to Steal Data from Air-Gapped Systems
Cybersecurity researchers on Monday discovered misconfigurations across older versions of Apache Airflow instances belonging to a number of high-profile companies across various sectors, resulting in the exposure of sensitive credentials for popular pl… Continue reading Poorly Configured Apache Airflow Instances Leak Credentials for Popular Services
A previously undocumented threat actor has been identified as behind a string of attacks targeting fuel, energy, and aviation production industries in Russia, the U.S., India, Nepal, Taiwan, and Japan with the goal of stealing data from compromised net… Continue reading A New APT Hacking Group Targeting Fuel, Energy, and Aviation Industries