Collaborate Disseminate
A Chinese threat actor named Roaming Mantis has been targeting Android users in France with the MoqHao malware in a new smishing campaign, security researchers with Sekoia warn.
read more Continue reading Ongoing ‘Roaming Mantis’ Smishing Campaign Hits Over 70,000 Users in France
A prominent cybersecurity executive is calling on the U.S. government to resist the urge to match China’s reported mandates around early vulnerability disclosure, warning that such a move would “meaningfully and dramatically increase the risk” of zero-… Continue reading Moussouris: U.S. Should Resist Urge to Match China Vuln Reporting Mandate
Security researchers with Palo Alto Networks have detailed a recent campaign targeting the Elastix system in Digium phones with a web shell that allows attackers to drop and execute additional payloads.
read more Continue reading Digium Phones Targeted in Cybercrime Campaign Aimed at VoIP Systems
Tools advertised as being capable of cracking passwords for HMIs, PLCs and other industrial products have been found to exploit a zero-day vulnerability, and threat actors are using these tools to deliver malware.
read more
Continue reading PLC and HMI Password Cracking Tools Deliver Malware
Microsoft this week sounded the alarm on a North Korean threat actor using the H0lyGh0st ransomware in attacks targeting small and midsize businesses worldwide.
read more Continue reading Microsoft: North Korean Hackers Target SMBs With H0lyGh0st Ransomware
Security researchers with threat intelligence firm Cyble have warned organizations about three new ransomware families named Lilith, RedAlert and 0mega.
read more Continue reading Organizations Warned of New Lilith, RedAlert, 0mega Ransomware
Microsoft’s massive Patch Tuesday rollout this month included fixes for multiple high-severity vulnerabilities impacting the Azure Site Recovery service.
read more
Continue reading DLL Hijacking Flaw Fixed in Microsoft Azure Site Recovery
Software giant Microsoft has open-sourced its internal tool for generating SBOMs (software bill of materials) as part of a move to help organizations be more transparent about supply chain relationships between components used when building a software … Continue reading Microsoft Releases Open Source Toolkit for Generating SBOMs
Microsoft has issued an urgent Patch Tuesday bulletin to warn of in-the-wild zero-day exploitation of a privilege escalation flaw in the Windows operating system.
read more
Continue reading Microsoft Patch Tuesday: 84 Windows Vulns, Including Already-Exploited Zero-Day
Software maker Adobe has rolled out a major security update for its flagship Acrobat and Reader products to fix at least 22 documented vulnerabilities, some serious enough to cause arbitrary code execution attacks.
read more
Continue reading Adobe Patch Tuesday: Critical Flaws in Acrobat, Reader, Photoshop