Collaborate Disseminate
Yaroslav Vasinskyi, a Ukrainian national, linked to the Russia-based REvil ransomware group has been extradited to the U.S. to face charges for his role in carrying out the file-encrypting malware attacks against several companies, including Kaseya la… Continue reading Ukrainian Hacker Linked to REvil Ransomware Attacks Extradited to United States
The insidious Emotet botnet, which staged a return in November 2021 after a 10-month-long hiatus, is once again exhibiting signs of steady growth, amassing a swarm of over 100,000 infected hosts for perpetrating its malicious activities.
“While Emotet… Continue reading Emotet Botnet’s Latest Resurgence Spreads to Over 100,000 Computers
Threat actors have been observed abusing a high-impact reflection/amplification method to stage sustained distributed denial-of-service (DDoS) attacks for up to 14 hours with a record-breaking amplification ratio of 4,294,967,296 to 1.
The attack vect… Continue reading Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times
Three high-impact security vulnerabilities have been disclosed in APC Smart-UPS devices that could be abused by remote adversaries as a physical weapon to access and control them in an unauthorized manner.
Collectively dubbed TLStorm, the flaws “allow… Continue reading Critical Bugs Could Let Attackers Remotely Hack, Damage APC Smart-UPS Devices
APT41, the state-sponsored threat actor affiliated with China, breached at least six U.S. state government networks between May 2021 and February 2022 by retooling its attack vectors to take advantage of vulnerable internet-facing web applications.
Th… Continue reading Chinese APT41 Hackers Broke into at Least 6 U.S. State Governments: Mandiant
Researchers have disclosed three security vulnerabilities affecting Pascom Cloud Phone System (CPS) that could be combined to achieve a full pre-authenticated remote code execution of affected systems.
Kerbit security researcher Daniel Eshetu said the… Continue reading Critical RCE Bugs Found in Pascom Cloud Phone System Used by Businesses
Microsoft’s Patch Tuesday update for the month of March has been made officially available with 71 fixes spanning across its software products such as Windows, Office, Exchange, and Defender, among others.
Of the total 71 patches, three are rated Crit… Continue reading Critical Security Patches Issued by Microsoft, Adobe and Other Major Software Firms
Cybersecurity researchers on Tuesday disclosed 16 new high-severity vulnerabilities in various implementations of Unified Extensible Firmware Interface (UEFI) firmware impacting multiple HP enterprise devices.
The shortcomings, which have CVSS scores … Continue reading New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices
A broad range of threat actors, including Fancy Bear, Ghostwriter, and Mustang Panda, have launched phishing campaigns against Ukraine, Poland, and other European entities amid Russia’s invasion of Ukraine.
Google’s Threat Analysis Group (TAG) said it… Continue reading Google: Russian Hackers Target Ukrainians, European Allies via Phishing Attacks
Google is officially buying threat intelligence and incident response company Mandiant in an all-cash deal approximately valued at $5.4 billion, the two technology firms announced Tuesday.
Mandiant is expected to be folded into Google Cloud upon the c… Continue reading Google Buys Cybersecurity Firm Mandiant for $5.4 Billion