Collaborate Disseminate
Symantec researchers have analyzed what appears to be the first ransomware family written in the Rust programming language.
read more
Continue reading Sophisticated Noberus Ransomware First to Be Coded in Rust
Tens of thousands of devices around the world, including many industrial control systems (ICS) and government computers, have been targeted in what appears to be an espionage campaign that involves a new piece of malware dubbed PseudoManuscrypt, Kasper… Continue reading Thousands of Industrial Systems Targeted With New ‘PseudoManuscrypt’ Spyware
Experts Comment on Concerns Related to Log4Shell Worm
read more
Continue reading Threat Groups Reportedly Working on Log4Shell Worm
The widely used Log4j logging tool is affected by a critical remote code execution vulnerability that has been increasingly exploited by malicious actors, including profit-driven cybercriminals and state-sponsored groups.
read more
Continue reading Industry Reactions to Log4Shell Vulnerability
Developers of the widely used Apache Log4j Java-based logging tool have disabled problematic functionality as more security issues have come to light.
read more
Continue reading Problematic Log4j Functionality Disabled as More Security Issues Come to Light
The widely used Apache Log4j Java-based logging tool is affected by a critical remote code execution vulnerability that has been increasingly exploited by malicious actors, including to deliver various types of malware.
read more
Continue reading Log4Shell Tools and Resources for Defenders – Continuously Updated
Several types of malware are being delivered in attacks exploiting the recently disclosed Log4j vulnerability named Log4Shell and LogJam.
read more
Continue reading Ransomware, Trojans, DDoS Malware and Crypto-Miners Delivered in Log4Shell Attacks
Google on Monday announced a Chrome 96 update that patches five vulnerabilities, including a zero-day that has been exploited in attacks.
The most severe of these vulnerabilities can be exploited to execute arbitrary code in the context of the browser…. Continue reading Chrome 96 Update Patches Exploited Zero-Day Vulnerability
Industrial organizations are exposed to attacks leveraging a recently disclosed — and already exploited — vulnerability affecting the widely used Log4j logging utility.
read more
Continue reading Industrial Organizations Targeted in Log4Shell Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added 13 new vulnerabilities to its list of security errors known to be exploited, including Apache Log4j and Fortinet FortiOS bugs that were disclosed last week.
read more
Continue reading CISA Expands ‘Must-Patch’ List With Log4j, FortiOS, Other Vulnerabilities