Collaborate Disseminate
The Nobelium group, linked to Russia’s spy agency, is looking to use resellers as a path to infiltrate their valuable downstream customers – and it’s working. Continue reading SolarWinds APT Targets Tech Resellers in Latest Supply-Chain Cyberattacks
The infamous Carbanak operator is moving is looking to juice its ransomware game by recruiting IT staff to its fake Bastion Secure ‘pen-testing’ company. Continue reading FIN7 Lures Unwitting Security Pros to Carry Out Ransomware Attacks
The high-severity bug, tracked as CVE-2021-1529, is an OS command-injection flaw. Continue reading Cisco SD-WAN Security Bug Allows Root Code Execution
A new email campaign from the threat group uses the attack-simulation framework in a likely leadup to ransomware deployment. Continue reading TA551 Shifts Tactics to Install Sliver Red-Teaming Tool
The group is likely nation-state-backed and is mounting an ongoing spy campaign using custom malware and stealthy tactics. Continue reading Fresh APT Harvester Reaps Telco, Government Data
A major cyberattack resulted in data being stolen, too, but Sinclair’s not sure which information is now in the hands of the crooks. Continue reading Sinclair Confirms Ransomware Attack That Disrupted TV Stations
The group – which also created BazarLoader and the Conti ransomware – has juiced its distribution tactics to threaten enterprises more than ever. Continue reading TrickBot Gang Enters Cybercrime Elite with Fresh Affiliates
The campaign, which uses the Apple Developer Program and Enterprise Signatures to get past Apple’s app review process, remains active. Continue reading CryptoRom Scam Rakes in $1.4M by Exploiting Apple Enterprise Features
A stored XSS and arbitrary file-upload bug can be paired with an authorization bypass to wreak havoc. Continue reading Brizy WordPress Plugin Exploit Chains Allow Full Site Takeovers
Cybercriminals exploited bugs in the world’s largest digital-goods marketplace to create malicious artwork offered as a perk to unsuspecting users. Continue reading OpenSea ‘Free Gift’ NFTs Drain Cryptowallet Balances