Collaborate Disseminate
Cisco has released software updates to address four security vulnerabilities in its software that could be weaponized by malicious actors to take control of affected systems.
The most critical of the flaws is CVE-2022-20650 (CVSS score: 8.8), which re… Continue reading New Flaws Discovered in Cisco’s Network Operating System for Switches
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of active exploitation of two security flaws impacting Zabbix open-source enterprise monitoring platform, adding them to its Known Exploited Vulnerabilities Catalog.
On top of… Continue reading CISA Alerts on Actively Exploited Flaws in Zabbix Network Monitoring Platform
TrickBot, the infamous Windows crimeware-as-a-service (CaaS) solution that’s used by a variety of threat actors to deliver next-stage payloads like ransomware, appears to be undergoing a transition of sorts, with no new activity recorded since the sta… Continue reading TrickBot Gang Likely Shifting Operations to Switch to New Malware
ASUSTOR network-attached storage (NAS) devices have become the latest victim of Deadbolt ransomware, less than a month after similar attacks singled out QNAP NAS appliances.
<!–adsense–>
In response to the infections, the company has released … Continue reading Warning — Deadbolt Ransomware Targeting ASUSTOR NAS Devices
Intelligence agencies in the U.K. and the U.S. disclosed details of a new botnet malware called Cyclops Blink that’s been attributed to the Russian-backed Sandworm hacking group and deployed in attacks dating back to 2019.
“Cyclops Blink appears to be… Continue reading U.S., U.K. Agencies Warn of New Russian Botnet Built from Hacked Firewall Devices
Cybersecurity firms ESET and Broadcom’s Symantec said they discovered a new data wiper malware used in fresh attacks against hundreds of machines in Ukraine, as Russian forces formally launched a full-scale military operation against the country.
The … Continue reading New Wiper Malware Targeting Ukraine Amid Russia’s Military Operation
Similarities have been unearthed between the Dridex general-purpose malware and a little-known ransomware strain called Entropy, suggesting that the operators are continuing to rebrand their extortion operations under a different name.
“The similariti… Continue reading Dridex Malware Deploying Entropy Ransomware on Hacked Computers
Researchers from China’s Pangu Lab have disclosed details of a “top-tier” backdoor put to use by the Equation Group, an advanced persistent threat (APT) with alleged ties to the cyber-warfare intelligence-gathering unit of the U.S. National Security A… Continue reading Chinese Experts Uncover Details of Equation Group’s Bvp47 Covert Hacking Tool
Users of Horde Webmail are being urged to disable a feature to contain a nine-year-old unpatched security vulnerability in the software that could be abused to gain complete access to email accounts simply by previewing an attachment.
“This gives the … Continue reading 9-Year-Old Unpatched Email Hacking Bug Uncovered in Horde Webmail Software
Another batch of 25 malicious JavaScript libraries have made their way to the official NPM package registry with the goal of stealing Discord tokens and environment variables from compromised systems, more than two months after 17 similar packages wer… Continue reading 25 Malicious JavaScript Libraries Distributed via Official NPM Package Repository