Collaborate Disseminate
Microsoft has confirmed that it’s aware of two Exchange Server zero-day vulnerabilities that have been exploited in targeted attacks. The tech giant is working on patches.
read more Continue reading Microsoft Confirms Exploitation of Two Exchange Server Zero-Days
Chinese cyberespionage group Witchetty has been observed updating its toolset in recent attacks targeting entities in the Middle East and Africa, Symantec reports.
Also referred to as LookingFrog, Witchetty is believed to be part of Cicada, the Chinese… Continue reading Chinese Cyberespionage Group ‘Witchetty’ Updates Toolset in Recent Attacks
A cybersecurity company based in Vietnam has reported seeing attacks exploiting a new Microsoft Exchange zero-day vulnerability, but it may just be a variation of the old ProxyShell exploit.
read more Continue reading Microsoft Exchange Attacks: Zero-Day or New ProxyShell Exploit?
Hackers possibly from China have been using a new technique to install persistent backdoors in VMware ESXi hypervisors, giving them significant capabilities while making detection more difficult.
read more Continue reading Hackers Possibly From China Using New Method to Deploy Persistent ESXi Backdoors
Black Lotus Labs, Lumen Technologies’ threat intelligence team, has issued a warning on Chaos, the new variant of the Kaiji distributed denial-of-service (DDoS) botnet, targeting enterprises and large organizations.
read more Continue reading Kaiji Botnet Successor ‘Chaos’ Targeting Linux, Windows Systems
What are MFA fatigue attacks and how can they be prevented?
read more Continue reading High-Profile Hacks Show Effectiveness of MFA Fatigue Attacks
Security researchers are warning of a new information stealer named Erbium being distributed under the Malware-as-a-Service (MaaS) model.
The threat made its initial appearance in late July, when a Russian speaking threat actor started advertising it o… Continue reading New Infostealer Malware ‘Erbium’ Offered as MaaS for Thousands of Dollars
Hacktivists might not know a lot about industrial control systems (ICS), but they’re well aware of the potential implications of these devices getting compromised. That is why some groups have been targeting these systems — which are often unprotected … Continue reading Hacktivist Attacks Show Ease of Hacking Industrial Control Systems
UK-based cybersecurity company Sophos has warned customers that a new zero-day vulnerability affecting some of its firewall products has been exploited in attacks.
read more Continue reading Sophos Firewall Zero-Day Exploited in Attacks on South Asian Organizations
US government agencies have shared a new cybersecurity resource that can help organizations defend critical control systems against threat actors.
read more Continue reading NSA, CISA Explain How Threat Actors Plan and Execute Attacks on ICS/OT