Collaborate Disseminate
Security researchers with ReversingLabs warn of a new supply chain attack using a malicious PyPI module that poses as a software development kit (SDK) from the cybersecurity firm SentinelOne.
read more Continue reading Malicious PyPI Module Poses as SentinelOne SDK
An analysis conducted by OT and IoT cybersecurity firm Nozomi Networks shows that the Glupteba botnet is still active following Google’s efforts to disrupt the cybercrime operation.
read more Continue reading Glupteba Botnet Still Active Despite Google’s Disruption Efforts
The US Cybersecurity and Infrastructure Security Agency (CISA) has added two flaws affecting Veeam’s Backup & Replication product to its Known Exploited Vulnerabilities Catalog.
read more Continue reading CISA Warns Veeam Backup & Replication Vulnerabilities Exploited in Attacks
Several cybersecurity firms have warned Microsoft that cybercriminals have been using signed malicious drivers to kill processes associated with antivirus (AV) and endpoint detection and response (EDR) products.
read more Continue reading Security Firms Warn Microsoft of Signed Drivers Used to Kill EDR, AV Processes
Security researchers with Juniper Networks’ Threat Labs warn of a new Python-based backdoor targeting VMware ESXi virtualization servers.
read more Continue reading New Python-Based Backdoor Targeting VMware ESXi Servers
Fortinet’s security researchers have shared information on three new ransomware families named Aerst, ScareCrow, and Vohuk.
read more Continue reading Users Warned of New Aerst, ScareCrow, and Vohuk Ransomware Families
The US Department of Health and Human Services (HHS) is warning healthcare organizations of the threat posed by ongoing Royal ransomware attacks.
Initially spotted in September 2022, the ransomware family is employed by a financially-motivated threat a… Continue reading Healthcare Organizations Warned of Royal Ransomware Attacks
Mordechai Guri, a cybersecurity researcher from the Ben-Gurion University of the Negev in Israel who specializes in air gap jumping, has released a paper detailing yet another method that can be used to stealthily exfiltrate data from systems isolated … Continue reading LF Electromagnetic Radiation Used for Stealthy Data Theft From Air-Gapped Systems
SafeBreach Labs security researcher Or Yair discovered several vulnerabilities that allowed him to turn endpoint detection and response (EDR) and antivirus (AV) products into wipers.
read more Continue reading Vulnerabilities Allow Researcher to Turn Security Products Into Wipers
An Iran-linked advanced persistent threat (APT) actor named Agrius is using a new wiper in attacks targeting entities in South Africa, Israel and Hong Kong, cybersecurity firm ESET reports.
read more Continue reading Iranian Hackers Deliver New ‘Fantasy’ Wiper to Diamond Industry via Supply Chain Attack