Collaborate Disseminate
In a new joint cybersecurity advisory, U.S. cybersecurity and intelligence agencies have warned about the use of Maui ransomware by North Korean government-backed hackers to target the healthcare sector since at least May 2021.
“North Korean state-spo… Continue reading North Korean Maui Ransomware Actively Targeting U.S. Healthcare Organizations
Researchers have disclosed what they say could be an attempt to kick-off a new large-scale cryptocurrency mining campaign targeting the NPM JavaScript package repository.
The malicious activity, attributed to a software supply chain threat actor dubbe… Continue reading Over 1,200 NPM Packages Found Involved in “CuteBoi” Cryptomining Campaign
Cisco on Wednesday rolled out patches for 10 security flaws spanning multiple products, one of which is rated Critical in severity and could be weaponized to conduct absolute path traversal attacks.
The issues, tracked as CVE-2022-20812 and CVE-2022-2… Continue reading Cisco and Fortinet Release Security Patches for Multiple Products
Cybersecurity researchers have taken the wraps off a new and entirely undetected Linux threat dubbed OrBit, signally a growing trend of malware attacks geared towards the popular operating system.
The malware gets its name from one of the filenames th… Continue reading Researchers Warn of New OrBit Linux Malware That Hijacks Execution Flow
Apple on Wednesday announced it plans to introduce an enhanced security setting called Lockdown Mode in iOS 16, iPadOS 16, and macOS Ventura to safeguard high-risk users against “highly targeted cyberattacks.”
The “extreme, optional protection” featur… Continue reading Apple’s New “Lockdown Mode” Protects iPhone, iPad, and Mac Against Spyware
The U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) has chosen the first set of quantum-resistant encryption algorithms that are designed to “withstand the assault of a future quantum computer.”
The post-quantum cry… Continue reading NIST Announces First Four Quantum-Resistant Cryptographic Algorithms
The maintainers of the OpenSSL project have released patches to address a high-severity bug in the cryptographic library that could potentially lead to remote code execution under certain scenarios.
The issue, now assigned the identifier CVE-2022-2274… Continue reading OpenSSL Releases Patch for High-Severity Bug that Could Lead to RCE Attacks
Malicious actors have been observed abusing legitimate adversary simulation software in their attacks in an attempt to stay under the radar and evade detection.
Palo Alto Networks Unit 42 said a malware sample uploaded to the VirusTotal database on Ma… Continue reading Hackers Abusing BRc4 Red Team Penetration Tool in Attacks to Evade Detection
Military entities located in Bangladesh continue to be at the receiving end of sustained cyberattacks by an advanced persistent threat tracked as Bitter.
“Through malicious document files and intermediate malware stages the threat actors conduct espio… Continue reading Bitter APT Hackers Continue to Target Bangladesh Military Entities
The operators of the Hive ransomware-as-a-service (RaaS) scheme have overhauled their file-encrypting software to fully migrate to Rust and adopt a more sophisticated encryption method.
“With its latest variant carrying several major upgrades, Hive al… Continue reading Hive Ransomware Upgrades to Rust for More Sophisticated Encryption Method