Collaborate Disseminate
A critical security hole affecting Apache Commons Text has been compared to the notorious Log4Shell vulnerability, but experts say it’s not as widespread.
read more Continue reading Critical Apache Commons Text Flaw Compared to Log4Shell, But Not as Widespread
A new ransomware family has been observed targeting transportation and related logistics organizations in Ukraine and Poland, Microsoft warns.
read more Continue reading New ‘Prestige’ Ransomware Targets Transportation Industry in Ukraine, Poland
Fortinet is concerned that many of its customers’ devices are still unprotected against attacks exploiting the recently disclosed zero-day vulnerability and the company has urged them to take action.
read more Continue reading Fortinet Admits Many Devices Still Unprotected Against Exploited Vulnerability
A threat actor is promoting on underground criminal forums a vendor-independent UEFI rootkit that can disable security software and controls, cybersecurity veteran Scott Scheferman warns.
read more Continue reading New ‘Black Lotus’ UEFI Rootkit Provides APT-Level Capabilities
Cisco’s Talos security researchers warn of a newly identified attack framework and its associated remote access trojan (RAT) targeting Windows, Linux, and macOS systems.
read more Continue reading New ‘Alchimist’ Attack Framework Targets Windows, Linux, macOS
ESET has published an analysis of the seven backdoors that Lebanese advanced persistent threat (APT) actor Polonium has been using since September 2021 in attacks targeting Israeli organizations.
read more Continue reading Seven ‘Creepy’ Backdoors Used by Lebanese Cyberspy Group in Israel Attacks
Details and a proof-of-concept (PoC) exploit have been published for the recent Fortinet vulnerability tracked as CVE-2022-40684, just as cybersecurity firms are seeing what appears to be the start of mass exploitation attempts.
read more Continue reading PoC Published for Fortinet Vulnerability as Mass Exploitation Attempts Begin
A China-linked cyberespionage group was recently observed targeting a state legislature in the United States, Symantec warns.
read more Continue reading Chinese Cyberspies Targeting US State Legislature
More than 800 corporate users have been infected in a new QBot malware distribution campaign since September 28, Kaspersky warns.
read more Continue reading QBot Malware Infects Over 800 Corporate Users in New, Ongoing Campaign
A cybercrime group named LofyGang has distributed roughly 200 malicious NPM packages that have been downloaded thousands of times over the past year, according to Checkmarx.
read more Continue reading LofyGang Cybercrime Group Used 200 Malicious NPM Packages for Supply Chain Attacks