Collaborate Disseminate
Public proof-of-concept (PoC) exploits for ProxyLogon could be fanning a feeding frenzy of attacks even as patching makes progress. Continue reading Exchange Cyberattacks Escalate as Microsoft Rolls One-Click Fix
A year after COVID-19 was officially determined to be a pandemic, the methods and tactics used by cybercriminals have drastically changed. Continue reading Cyberattacks See Fundamental Changes, A Year into COVID-19
Unpatched Schneider Electric PowerLogic ION/PM smart meters are open to dangerous attacks. Continue reading Critical Security Hole Can Knock Smart Meters Offline
A legitimate binary for creating shortcut keys in Windows is being used to help the malware sneak past defenses, in a rash of new campaigns. Continue reading Metamorfo Banking Trojan Abuses AutoHotKey to Avoid Detection
A spam campaign hides a malicious executable behind file archive extensions. Continue reading NanoCore RAT Scurries Past Email Defenses with .ZIPX Tactic
At least 10 nation-state-backed groups are using the ProxyLogon exploit chain to compromise email servers, as compromises mount. Continue reading Microsoft Exchange Servers Face APT Attack Tsunami
The financial cyber-gang is running limited attacks ahead of broader offensives on point-of-sale systems. Continue reading FIN8 Resurfaces with Revamped Backdoor Malware
The security hole in the Plus Addons for Elementor plugin was used in active zero-day attacks prior to a patch being issued. Continue reading Cyberattackers Exploiting Critical WordPress Plugin Bug
A never-before-seen malware-dropper, Clast82, fetches the AlienBot and MRAT malware in a savvy Google Play campaign aimed at Android users. Continue reading Google Play Harbors Malware-Laced Apps Delivering Spy Trojans
Website admins should patch all plugins, WordPress itself and back-end servers as soon as possible. Continue reading WordPress Injection Anchors Widespread Malware Campaign