Collaborate Disseminate
Espionage attacks exploiting the just-patched remote code-execution security bugs in Microsoft Exchange servers are quickly spreading. Continue reading CISA Orders Federal Agencies to Patch Exchange Servers
Attackers have weaponized code dependency confusion to target internal apps at tech giants. Continue reading Malicious Code Bombs Target Amazon, Lyft, Slack, Zillow
Full dumps of email boxes, lateral movement and backdoors characterize sophisticated attacks by a Chinese APT – while more incidents spread like wildfire. Continue reading Microsoft Exchange Zero-Day Attackers Spy on U.S. Targets
The Ryuk scourge has a new trick in its arsenal: Self-replication via SMB shares and port scanning. Continue reading Ryuk Ransomware: Now with Worming Self-Propagation
COVID-19 impacted volumes for the year, but the U.S. moved into third place on the list of countries most infected by stalkerware. Continue reading Stalkerware Volumes Remain Concerningly High, Despite Bans
Sneaker bots ready to scoop up the new Yeezy Boost 700 “Sun” shoes to resell at a huge markup. Continue reading Yeezy Fans Face Sneaker-Bot Armies for Boost ‘Sun’ Release
The hotly anticipated ray-tracing, advanced gaming graphics chip will throttle Ethereum mining. Continue reading Nvidia’s Anti-Cryptomining Chip May Not Discourage Attacks
The FBI has warned that telephony denial-of-service attacks are taking aim at emergency dispatch centers, which could make it impossible to call for police, fire or ambulance services. Continue reading TDoS Attacks Take Aim at Emergency First-Responder Services
The threat actors stole data and used Clop’s leaks site to demand money in an extortion scheme, though no ransomware was deployed. Continue reading Accellion FTA Zero-Day Attacks Show Ties to Clop Ransomware, FIN11
A second malware that targets Macs with Apple’s in-house M1 chip is infecting machines worldwide — but it’s unclear why. Continue reading Mysterious Silver Sparrow Malware Found Nesting on 30K Macs