Collaborate Disseminate
The US Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy this week issued guidance on mitigating attacks against uninterruptible power supply (UPS) devices.
read more
Continue reading US Government Warns of Attacks Targeting UPS Devices
Sophos on Monday raised the alarm about a recently patched Sophos Firewall vulnerability being exploited in attacks.
Impacting the User Portal and Webadmin of Sophos Firewall, the bug is described as an authentication bypass that could lead to remote c… Continue reading Sophos Warns of Attacks Exploiting Recent Firewall Vulnerability
In late 2021, incident response and threat intelligence firm Volexity observed a Chinese threat actor using a macOS variant of the malware known as Gimmick.
read more
Continue reading Chinese Cyberspies Seen Using macOS Variant of ‘Gimmick’ Malware
Cybersecurity researchers at Splunk have conducted an analysis to determine how long it takes various ransomware strains to encrypt files on compromised systems.
read more
Continue reading Analysis Shows How Fast Various Ransomware Strains Encrypt 100,000 Files
Internet search engine Censys on Monday warned that a new wave of DeadBolt ransomware attacks has been targeting network-attached storage (NAS) devices made by QNAP.
read more
Continue reading QNAP Devices Targeted in New Wave of DeadBolt Ransomware Attacks
The South Korea-linked state-sponsored threat actor DarkHotel is believed to have conducted a series of recent attacks targeting major hotel chains in Macau, according to Trellix, an XDR company launched earlier this year following the merger of McAfee… Continue reading Hotels in Macau Targeted in Attacks Linked to South Korea’s DarkHotel APT
Taiwanese electronics giant ASUS has issued an alert to warn users of Cyclops Blink botnet attacks targeting its routers.
read more
Continue reading Russia-Linked Cyclops Blink Botnet Attacking ASUS Routers
A Ukrainian security researcher has leaked the source code of what appears to be a newer version of the Conti ransomware. This is part of a series of leaks prompted by the cybercrime group expressing support for Russia.
read more
Continue reading Ukrainian Security Researcher Leaks Newer Conti Ransomware Source Code
The FBI and the Treasury Department on Thursday issued a joint cybersecurity advisory to warn organizations in the United States about attacks involving ransomware named AvosLocker.
read more
Continue reading US Critical Infrastructure Targeted by AvosLocker Ransomware
Google on Thursday published an analysis of the activities associated with an initial access broker (IAB) linked to a Russian-speaking cybercrime group tracked as FIN12 and Wizard Spider.
read more
Continue reading Google Analyzes Activity of ‘Exotic Lily’ Initial Access Broker