Collaborate Disseminate
Details of a new nation-state sponsored phishing campaign have been uncovered setting its sights on European governmental entities in what’s seen as an attempt to obtain intelligence on refugee and supply movement in the region.
Enterprise security co… Continue reading Hackers Try to Target European Officials to Get Info on Ukrainian Refugees, Supplies
Distributed denial-of-service (DDoS) attacks leveraging a new amplification technique called TCP Middlebox Reflection have been detected for the first time in the wild, six months after the novel attack mechanism was presented in theory.
“The attack [… Continue reading Hackers Begin Weaponizing TCP Middlebox Reflection for Amplified DDoS Attacks
Critical security vulnerabilities have been uncovered in VoIPmonitor software that, if successfully exploited, could allow unauthenticated attackers to escalate privileges to the administrator level and execute arbitrary commands.
Following responsibl… Continue reading Critical Security Bugs Uncovered in VoIPmonitor Monitoring Software
As many as five security vulnerabilities have been disclosed in the PJSIP open-source multimedia communication library that could be abused by an attacker to trigger arbitrary code execution and denial-of-service (DoS) in applications that use the pro… Continue reading Critical Bugs Reported in Popular Open Source PJSIP SIP and Media Stack
Days after the Conti ransomware group broadcasted a pro-Russian message pledging its allegiance to Vladimir Putin’s ongoing invasion of Ukraine, an anonymous security researcher using the Twitter handle @ContiLeaks has leaked the syndicate’s internal … Continue reading Conti Ransomware Gang’s Internal Chats Leaked Online After Siding With Russia
A new data wiper malware has been observed deployed against an unnamed Ukrainian government network, a day after destructive cyber attacks struck multiple entities in the country preceding the start of Russia’s military invasion.
Slovak cybersecurity … Continue reading Second New ‘IsaacWiper’ Data Wiper Targets Ukraine After Russian Invasion
Even as the TrickBot infrastructure closed shop, the operators of the malware are continuing to refine and retool their arsenal to carry out attacks that culminated in the deployment of Conti ransomware.
IBM Security X-Force, which discovered the reva… Continue reading TrickBot Malware Gang Upgrades its AnchorDNS Backdoor to AnchorMail
UPDATE: It’s worth noting that the malware Microsoft tracks as FoxBlade is the same as the data wiper that’s been denominated HermeticWiper (aka KillDisk).
Microsoft on Monday disclosed that it detected a new round of offensive and destructive cyberat… Continue reading Microsoft Finds FoxBlade Malware Hit Ukraine Hours Before Russian Invasion
A previously undocumented espionage tool has been deployed against selected governments and other critical infrastructure targets as part of a long-running espionage campaign orchestrated by China-linked threat actors since at least 2013.
Broadcom’s S… Continue reading China-linked Daxin Malware Targeted Multiple Governments in Espionage Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities Catalog to include a recently disclosed zero-day flaw in the Zimbra email platform citing evidence of active exploitation in the wild.
Tracke… Continue reading CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog