Medusa ransomware: FBI and CISA urge organisations to act now to mitigate threat

The Medusa ransomware gang continues to present a major threat to the critical infrastructure sector, according to a newly-released – with at least one organisation hit with a “triple-extortion” threat.

Read more in my article on the Tripwire State … Continue reading Medusa ransomware: FBI and CISA urge organisations to act now to mitigate threat

Man found guilty of planting infinite loop logic bomb on ex-employer’s system

Davis Lu had planted malicious Java code onto his employer’s network that would cause “infinite loops” that would ultimate result in the server crashing or hanging.

Read more in my article on the Hot for Security blog. Continue reading Man found guilty of planting infinite loop logic bomb on ex-employer’s system

Stop targeting Russian hackers, Trump administration orders US Cyber Command

The Trump administration has told US cyber command and CISA to stop following or reporting on Russian cyber threats.

Yes, Russia! That country everyone used to agree was home to lots of ransomware gangs and hackers. Hmmm…

Read more in my articl… Continue reading Stop targeting Russian hackers, Trump administration orders US Cyber Command

Warning issued as hackers offer firms fake cybersecurity audits to break into their systems

Companies are being warned that malicious hackers are using a novel technique to break into businesses – by pretending to offer audits of the company’s cybersecurity.

Read more in my article on the Tripwire State of Security blog. Continue reading Warning issued as hackers offer firms fake cybersecurity audits to break into their systems

Flaw found in stalkerware apps, exposing millions of people. Here’s how to find out if your phone is being spied upon

A serious security vulnerability has been found in popular stalkerware apps, exposing the sensitive personal information and communications of millions of people.

Read more in my article on the Hot for Security blog. Continue reading Flaw found in stalkerware apps, exposing millions of people. Here’s how to find out if your phone is being spied upon

Got a Microsoft Teams invite? Storm-2372 gang exploit device codes in global phishing attacks

Security experts have warned that a cybercriminal group has been running a malicious and inventive phishing campaign since August 2024 to break into organizations across Europe, North America, Africa, and the Middle East.

Read more in my article on … Continue reading Got a Microsoft Teams invite? Storm-2372 gang exploit device codes in global phishing attacks

US charges two Russian men in connection with Phobos ransomware operation

Roman Berezhnoy and Egor Nikolaevich Glebov are alleged to have extorted over US $16 million in ransom payments using the Phobos ransomware, impacting over 1000 organisations in the United States.

Read more in my article on the Hot for Security blog. Continue reading US charges two Russian men in connection with Phobos ransomware operation