Western Digital Users Face Another RCE
Say hello to one more zero-day and yet more potential remote data death for those who can’t/won’t upgrade their My Cloud storage devices. Continue reading Western Digital Users Face Another RCE
Category Archives: Hacks
Kaseya Patches Imminent After Zero-Day Exploits, 1,500 Impacted
REvil ransomware gang lowers price for universal decryptor after massive worldwide ransomware push against Kaseya security vulnerability CVE-2021-30116. Continue reading Kaseya Patches Imminent After Zero-Day Exploits, 1,500 Impacted
Linux Variant of REvil Ransomware Targets VMware’s ESXi, NAS Devices
Criminals behind the potent REvil ransomware have ported the malware to Linux for targeted attacks. Continue reading Linux Variant of REvil Ransomware Targets VMware’s ESXi, NAS Devices
Hacked Data for 69K LimeVPN Users Up for Sale on Dark Web
LimeVPN has confirmed a data incident, and meanwhile its website has been knocked offline. Continue reading Hacked Data for 69K LimeVPN Users Up for Sale on Dark Web
Why MTTR is Bad for SecOps
Kerry Matre, senior director at Mandiant, discusses the appropriate metrics to use to measure SOC and analyst performance, and how MTTR leads to bad behavior. Continue reading Why MTTR is Bad for SecOps
Zero-Day Used to Wipe My Book Live Devices
Threat actors may have been duking it out for control of the compromised devices, first using a 2018 RCE, then password-protecting a new vulnerability. Continue reading Zero-Day Used to Wipe My Book Live Devices
Users Clueless About Cybersecurity Risks: Study
The return to offices, coupled with uninformed users (including IT pros) has teed up an unprecedented risk of enterprise attack. Continue reading Users Clueless About Cybersecurity Risks: Study
Russian Attackers Breach Microsoft Customer Service Accounts
American IT companies and government have been targeted by the Nobelium state-sponsored group. Continue reading Russian Attackers Breach Microsoft Customer Service Accounts
Microsoft Signs Malware That Spreads Through Gaming
The driver, called “Netfilter,” is a rootkit that talks to Chinese C2 IPs and aims to spoof gamers’ geo-locations to cheat the system and play from anywhere, Microsoft said.
Continue reading Microsoft Signs Malware That Spreads Through Gaming
FIN7 ‘Pen Tester’ Headed to Jail Amid $1B in Payment-Card Losses
One of the Carbanak cybergang’s highest-level hackers is destined to serve seven years while making $2.5 million in restitution payments. Continue reading FIN7 ‘Pen Tester’ Headed to Jail Amid $1B in Payment-Card Losses