Collaborate Disseminate
Several malware families are being delivered using the recently disclosed Windows vulnerability identified as Follina and CVE-2022-30190, which remains without an official patch.
read more
Continue reading ‘Follina’ Vulnerability Exploited to Deliver Qbot, AsyncRAT, Other Malware
Threat actors have already started exploiting a severe vulnerability that Owl Labs addressed in its video conferencing devices earlier this week.
read more
Continue reading Threat Actors Start Exploiting Meeting Owl Pro Vulnerability Days After Disclosure
Atlassian informed customers on Friday that it has released patches for the critical Confluence Server vulnerability that has been exploited in attacks. The announcement came just before cybersecurity organizations warned that exploitation attempts hav… Continue reading Atlassian Patches Confluence Zero-Day as Exploitation Attempts Surge
Microsoft says it has uncovered and disabled the OneDrive infrastructure of a Lebanon-based threat actor targeting organizations in Israel.
read more
Continue reading Lebanese Threat Actor ‘Polonium’ Targets Israeli Organizations
Atlassian scrambling to patch Confluence Server zero-day exploited by multiple threat groups
Atlassian customers have been warned that hackers are exploiting a Confluence Server zero-day vulnerability. The flaw is currently unpatched and it appears to … Continue reading Atlassian Confluence Servers Hacked via Zero-Day Vulnerability
The recent Conti leaks show that the notorious ransomware group has been working on firmware exploits targeting the Intel Management Engine (ME) system.
read more
Continue reading Leaks Show Conti Ransomware Group Working on Firmware Exploits
Several government agencies in the United States have issued a joint cybersecurity alert to warn organizations about a data extortion group named “Karakurt.”
read more
Continue reading US Warns Organizations of ‘Karakurt’ Cyber Extortion Group
Secureworks warns of a new attack campaign targeting internet-exposed, improperly secured Elasticsearch databases to replace their data with a ransom note.
read more
Continue reading Cybercriminals Hold 1,200 Unsecured Elasticsearch Databases for Ransom
Europol today announced the takedown of FluBot, a piece of mobile malware targeting both Android and iOS devices that has been fast-spreading via SMS messages.
read more
Continue reading Europol Announces Takedown of FluBot Mobile Spyware
The Windows zero-day vulnerability identified as Follina and CVE-2022-30190 is being exploited in an increasing number of attacks, including by a Chinese APT group.
read more
Continue reading Chinese Threat Actors Exploiting ‘Follina’ Vulnerability