Collaborate Disseminate
Cybersecurity firm Emsisoft has released free decryptor tools for AstraLocker, a “smash-and-grab” ransomware family that was recently retired.
read more
Continue reading Free Decryptors Released for AstraLocker Ransomware
Microsoft has confirmed that the recent rollback of a feature related to the blocking of internet macros in its Office suite is only temporary.
read more
Continue reading Microsoft Confirms Temporary Rollback of Macro Blocking Feature
A recently discovered Windows worm is abusing compromised QNAP network-attached storage (NAS) devices as stagers to spread to new systems, according to Cybereason.
Dubbed Raspberry Robin, the malware was initially spotted in September 2021, spreading m… Continue reading ‘Raspberry Robin’ Windows Worm Abuses QNAP Devices
Security researchers at Trend Micro have identified a new ransomware family that is being delivered as a fake Google Software Update application.
read more
Continue reading New ‘HavanaCrypt’ Ransomware Distributed as Fake Google Software Update
OpenSSL has issued an urgent advisory to warn of a memory corruption vulnerability that exposes servers to remote code execution attacks.
The vulnerability, tracked as CVE-2022-2274, was introduced in OpenSSL 3.0.4 and could potentially allow malicious… Continue reading OpenSSL Patches Remote Code Execution Vulnerability
Faced with a surge in state-sponsored mercenary spyware attacks targeting its flagship iOS platform, Apple plans to add a new ‘Lockdown Mode’ that significantly reduces attack surface and adds technical roadblocks to limit sophisticated software exploi… Continue reading Apple Adds ‘Lockdown Mode’ to Thwart .Gov Mercenary Spyware
Security researchers at ReversingLabs are warning of a “significant escalation in software supply chain attacks” after discovering more than two dozen malicious NPM packages siphoning user data from mobile and desktop applications.
read more
Continue reading Researchers Flag ‘Significant Escalation’ in Software Supply Chain Attacks
The United States Department of Defense (DoD) has launched a one-week bug bounty program to reward researchers who find high- and critical-severity vulnerabilities in publicly accessible assets owned by the DoD.
read more
Continue reading DoD Launches ‘Hack US’ Bounties for Major Flaws in Publicly Exposed Assets
A new variant of the Hive ransomware written using the Rust programming language is more evasive and provides attackers with flexibility, courtesy of support for command-line parameters.
read more
Continue reading Evasive Rust-Coded Hive Ransomware Variant Emerges
Chicago-based Infrastructure-as-Code (IaC) startup oak9 has attracted new interest from venture capitalists with Cisco Investments and Morgan Stanley’s Next Level Fund joining a new $8 million funding round.
read more
Continue reading Oak9 Lands $8 Million in New Venture Investment