Collaborate Disseminate
The US Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a joint advisory detailing the Zeppelin ransomware.
read more Continue reading CISA, FBI Warn Organizations of Zeppelin Ransomware Attacks
The number of ransomware attacks on industrial organizations decreased from 158 in the first quarter of 2022 to 125 in the second quarter, and it may be — at least partially — a result of the Conti operation shutting down.
read more Continue reading Number of Ransomware Attacks on Industrial Orgs Drops Following Conti Shutdown
The US Cybersecurity and Infrastructure Security Agency (CISA) revealed on Tuesday that a recently patched vulnerability affecting the UnRAR archive extraction tool is being exploited in the wild.
read more Continue reading UnRAR Vulnerability Exploited in the Wild, Likely Against Zimbra Servers
The US Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Cyber Security Centre (ACSC) have published a joint advisory to detail the top malware strains of 2021.
read more Continue reading US, Australian Cybersecurity Agencies Publish List of 2021’s Top Malware
The US Cybersecurity and Infrastructure Security Agency (CISA) informed organizations on Thursday that a recently patched vulnerability affecting the Zimbra enterprise email solution has been exploited in attacks.
read more Continue reading Zimbra Credential Theft Vulnerability Exploited in Attacks
Google-owned malware analysis service VirusTotal has published a report showing how threat actors abuse trust to bypass defenses and deliver their malware.
According to data collected by VirusTotal, legitimate websites and applications are often levera… Continue reading VirusTotal Data Shows How Malware Distribution Leverages Legitimate Sites, Apps
A LockBit ransomware operator or affiliate has been abusing Windows Defender to decrypt and load Cobalt Strike payloads during attacks, according to endpoint security firm SentinelOne.
read more Continue reading LockBit Ransomware Abuses Windows Defender for Payload Loading
Threat actors are embedding macro-enabled Office documents in container files such as archives and disk images to circumvent a recently rolled-out macro-blocking feature in Microsoft Office.
read more Continue reading Malicious Macro-Enabled Docs Delivered via Container Files to Bypass Microsoft Protections
Over the past year, North Korean advanced persistent threat (APT) actor Kimsuky has been observed using a browser extension to steal content from victims’ webmail accounts, threat intelligence and incident response company Volexity reports.
read more Continue reading N Korean APT Uses Browser Extension to Steal Emails From Foreign Policy, Nuclear Targets
The US House of Representatives this week passed two cybersecurity bills: the Energy Cybersecurity University Leadership Act and the RANSOMWARE Act.
RANSOMWARE is an acronym for ‘Reporting Attacks from Nations Selected for Oversight and Monitoring Web … Continue reading House Passes Cybersecurity Bills Focusing on Energy Sector, Information Sharing