Never heard of the Embargo ransomware group? SuspectFile provides some insight.

Marco A. De Felice (aka @amvinfe) writes: Embargo is yet another ransomware group emerging in the digital extortion landscape, a group that some industry analysts compare to the much more well-known Alphv group. However, programming similarities do not… Continue reading Never heard of the Embargo ransomware group? SuspectFile provides some insight.

911 S5 Botnet Dismantled and Its Administrator Arrested in Coordinated International Operation

A court-authorized international law enforcement operation led by the U.S. Justice Department disrupted a botnet used to commit cyber attacks, large-scale fraud, child exploitation, harassment, bomb threats, and export violations. As part of this opera… Continue reading 911 S5 Botnet Dismantled and Its Administrator Arrested in Coordinated International Operation

Did BreachForums get its domain back because NiceNIC was originally nicer to them than to law enforcement?

When the FBI and its law enforcement collaborators seized BreachForums on May 15, a splash screen announced the seizure. But by the next morning, BreachForums seemed to have regained control of their domain. How that happened has yet to be explained by… Continue reading Did BreachForums get its domain back because NiceNIC was originally nicer to them than to law enforcement?

Swiss law enforcement actions appear linked to seizure of BreachForums

There have been a few developments likely related to the seizure of BreachForums. As a preview, recall that Kantonspolizei Zürich was one of the cooperating entities in the takedown and that the seizure notice had two avatars behind bars. One avatar wa… Continue reading Swiss law enforcement actions appear linked to seizure of BreachForums

TCS Employee Suspended After Reporting a Security Incident, Reddit Post Goes Viral

Purvi Khemani reports: A Reddit user recently shared a troubling experience on the platform. They claimed they were fired from TCS (Tata Consultancy Services) after reporting a security issue. Using the handle @Personal_Stage4690, they posted on the ‘D… Continue reading TCS Employee Suspended After Reporting a Security Incident, Reddit Post Goes Viral

CISA’s KEV catalog making a positive difference to defenders

Jonathan Greig reports that a CISA resource is having a positive effect at both a federal level as well as for non-governmental organizations: The Cybersecurity and Infrastructure Security Agency (CISA) has run its Known Exploited Vulnerabilities (KEV)… Continue reading CISA’s KEV catalog making a positive difference to defenders

Ransomware gang targets nonprofit providing clean water to world’s poorest

Alexander Martin reports: Water for People, a nonprofit that aims to improve access to clean water for people whose health is threatened by a lack of it for drinking and sanitation, is the latest organization to have been hit by ransomware criminals. T… Continue reading Ransomware gang targets nonprofit providing clean water to world’s poorest

U.S. water utilities were hacked after leaving their default passwords set to ‘1111,’ cybersecurity officials say

Wilfred Chan reports: Providers of critical infrastructure in the United States are doing a sloppy job of defending against cyber intrusions, the National Security Council tells Fast Company, pointing to recent Iran-linked attacks on U.S. water utiliti… Continue reading U.S. water utilities were hacked after leaving their default passwords set to ‘1111,’ cybersecurity officials say