Collaborate Disseminate
A previously undocumented backdoor that was recently found targeting an unnamed computer retail company based in the U.S. has been linked to a longstanding Chinese espionage operation dubbed Grayfly.
In late August, Slovakian cybersecurity firm ESET di… Continue reading Experts Link Sidewalk Malware Attacks to Grayfly Chinese Hacker Group
Microsoft on Wednesday said it remediated a vulnerability in its Azure Container Instances (ACI) services that could have been weaponized by a malicious actor “to access other customers’ information” in what the researchers described as the “first cros… Continue reading Microsoft Warns of Cross-Account Takeover Bug in Azure Container Instances
The operators behind the REvil ransomware-as-a-service (RaaS) staged a surprise return after a two-month hiatus following the widely publicized attack on technology services provider Kaseya on July 4.
<!–adsense–>
Two of the dark web portals, i… Continue reading Russian Ransomware Group REvil Back Online After 2-Month Hiatus
Network security solutions provider Fortinet confirmed that a malicious actor had unauthorizedly disclosed VPN login names and passwords associated with 87,000 FortiGate SSL-VPN devices.
“These credentials were obtained from systems that remained unpat… Continue reading Hackers Leak VPN Account Passwords From 87,000 Fortinet FortiGate Devices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday issued a bulletin warning of a zero-day flaw affecting Zoho ManageEngine ADSelfService Plus deployments that is currently being actively exploited in the wild.
The flaw, trac… Continue reading CISA Warns of Actively Exploited Zoho ManageEngine ADSelfService Vulnerability
A critical security vulnerability has been disclosed in HAProxy, a widely used open-source load balancer and proxy server, that could be abused by an adversary to possibly smuggle HTTP requests, resulting in unauthorized access to sensitive data and ex… Continue reading HAProxy Found Vulnerable to Critical HTTP Request Smuggling Attack
Cybersecurity researchers on Tuesday released new findings that reveal a year-long mobile espionage campaign against the Kurdish ethnic group to deploy two Android backdoors that masquerade as legitimate apps.
Active since at least March 2020, the atta… Continue reading Experts Uncover Mobile Spyware Attacks Targeting Kurdish Ethnic Group
Microsoft on Tuesday warned of an actively exploited zero-day flaw impacting Internet Explorer that’s being used to hijack vulnerable Windows systems by leveraging weaponized Office documents.
Tracked as CVE-2021-40444 (CVSS score: 8.8), the remote cod… Continue reading New 0-Day Attack Targeting Windows Users With Microsoft Office Documents
The maintainers of Jenkins—a popular open-source automation server software—have disclosed a security breach after unidentified threat actors gained access to one of their servers by exploiting a recently disclosed vulnerability in Atlassian Confluence… Continue reading Latest Atlassian Confluence Flaw Exploited to Breach Jenkins Project Server
End-to-end encrypted email service provider ProtonMail has drawn criticism after it ceded to a legal request and shared the IP address of anti-gentrification activists with law enforcement authorities, leading to their arrests in France.
The Switzerlan… Continue reading ProtonMail Logs Activist’s IP Address With Authorities After Swiss Court Order