Trend Micro
Heading to AWS re:Invent 2023? Donât miss out on our talk with Melinda Marks, ESG Practice Director for Cybersecurity, about cloud detection and response (CDR) and whatâs trending in cloud security.
Infosecurity News
Identified as CVE-2023-46604, the vulnerability has a CVSS score of 9.8
CSO
Nearly all of them still have a long way to go according to a new Cisco report.
Trend Micro
The Trend Micro Managed XDR team encountered malicious operations that used techniques similar to the ones used by Genesis Market, a website for facilitating fraud that was taken down in April 2023.
Trend Micro
Dive into the world of private 5G networks and learn about a critical security vulnerability that could expose IoT devices to attacks from external networks.
Cyber Security News
Trend Micro researchers recently revealed Apache ActiveMQ vulnerability (CVE-2023-46604) was actively exploited.
The Hacker News
The Kinsing threat actors are exploiting a critical security flaw in vulnerable Apache ActiveMQ servers to infect Linux systems with cryptocurrency mi
Bleeping Computer
The Kinsing malware operator is actively exploiting the CVE-2023-46604 critical vulnerability in the Apache ActiveMQ open-source message broker to compromise Linux systems.
Ars Technica
Microsoft CEO Nadella "furious"; OpenAI President and three senior researchers resign.
The Record
In a recent campaign, the hacking group tracked as UAC-0050 attempted to spread the Remcos remote access tool, according to research by Ukraine's computer emergencies response team (CERT-UA).
CyberNews
Henry Schein confirms an October data breach, claimed by APLHV/BlackCat ransom group, and reveals that customer bank account and credit card numbers were likely exposed.
The Hacker News
Microsoft has released fixes to address 63 security bugs in its software for the month of November 2023.
Cyber Security News
Best Network Security Companies for CISO: 1. Perimeter81 2. Palo Alto Networks 3. Cisco 4. Check Point 5. IBM 6. Crowdstrike 7. Trend Micro.
SecurityWeek
CISA says Royal ransomware has targeted 350 organizations to date, demanding over $275 million in ransoms.
The Record
The leading cybersecurity agencies in the U.S. released startling new data on the Royal ransomware gang on Monday, confirming previous reports that the gang may be preparing for a rebrand.
Trend Micro
Learn what 100 straight quarters of profitability means to a Trender who has been here for every one of them.
The Hacker News
Malaysian authorities, with help from the AFP and FBI, shut down the notorious phishing-as-a-service (PhaaS) operation, BulletProofLink.
Trend Micro
We encountered the Cerber ransomware exploiting the Atlassian Confluence vulnerability CVE-2023-22518 in its operations.
Trend Micro
We analyzed a phishing campaign involving malicious emails containing a link to a file-sharing solution, which further leads to a PDF document with a secondary link designed to steal login info and session cookies.
Cyber Security News
Four new zero-day vulnerabilities have been identified in Microsoft Exchange with server-side request forgery and remote code execution.
DarkReading
With AI and publicly available data, cybercriminals have the resources they need to fake a real-life kidnapping and make you believe it.
CSO
More than half of security leaders surveyed didnât understand the security risks associated with shifting to the cloud.
Trend Micro
Explore the world of zero day threats and gain valuable insight into the importance of proactive detection and remediation.
Ars Technica
No cure yet for a popular iPhone attack, except for turning off Bluetooth.
SecurityWeek
VMwareâs Threat Analysis Unit finds 34 new vulnerable kernel drivers that can be exploited to alter or erase firmware and escalate privileges.
The Hacker News
Meet "Prolific Puma," the secretive threat actor behind a dangerous link shortening service with thousands of malicious domains used for phishing.
The Record
Dallas County provided an update on the ransomware attack that was reported this week, telling residents that they were able to stop the incident before the hackers could encrypt files or systems.
Cyber Security News
The Kopeechka service, which refers to "penny" in Russian, is a new tool that criminals use to quickly and easily generate hundreds of fake social media accounts.
Trend Micro
Customer feedback validates Trend's leadership in in XDR, endpoint security, hybrid Cloud
The Record
Low-skill cybercriminals are using a new tool to create hundreds of fake social media accounts in just a few seconds.
Cyber Security News
Best Cloud Access Security Broker (CASB) Software: 1. DoControl CASB 2. Microsoft Cloud App Security 3. Forcepoint 4. Palo Alto Networks.
The Record
Cloud computing giant VMware warned of new vulnerabilities affecting a widely-used server management product.
Bleeping Computer
Chile's Grupo GTD warns that a cyberattack has impacted its Infrastructure as a Service (IaaS) platform, disrupting online services.
The Hacker News
Upgrade your virtualization systems with VMware's new patches addressing two critical vulnerabilities in the vCenter Server.
Ars Technica
Nvidia tried to end-run restrictions with new designs, but US govt said not so fast.
Ars Technica
One is fatally hacked, the other shut down in international police dragnet.
DarkReading
SolarWinds' access controls contain five high and three critical-severity security vulnerabilities that need to be patched yesterday.
DarkReading
The router specialist says the attacker's claims to have heisted millions and millions of records are significantly overblown. But an incident did happen, stemming from a successful phish.
SecurityWeek
Hacker claims to have breached D-Link and is offering to sell stolen data, but the company says the claims are exaggerated.
Cyber Security News
D-Link Corporation, a global leader in networking solutions, recently faced a data breach allegation. D-Link confirms that its operations are not affected by the incident.
The Hacker News
D-Link confirms data breach. Low-sensitivity data exposed from an old system due to an employee falling for a phishing attack
The Record
The Ukrainian Cyber Alliance hacktivism group says it wiped out the Trigona gang's servers, defaced its website and exfiltrated data about the operation.
Latest Hacking News
The notorious DarkGate malware has become active again, as it now spreads via compromised Skype accounts. Researchers warn users to remain cautious while interacting with unknown accounts. DarkGate Malware Spreads Via Compromised Skype Accounts According to a
The Hacker News
WinRAR users, be alert! Pro-Russian hackers exploited a recent vulnerability in the software. Ensure your version is updated!
Infosecurity News
A new version of Void Rabisu's RomCom backdoor was used to lure attendees of the June 2023 Women Political Leaders Summit
-1.webp)
Cyber Security News
o spread the DarkGate malware to the targeted businesses, hackers utilized the Teams and Skype messaging platforms.
Trend Micro
This blog discusses how threat actors abuse Discordâs content delivery network (CDN) to host and spread Lumma Stealer, and talks about added capabilities to the information stealing malware.
Bleeping Computer
A new, lightweight variant of the RomCom backdoor was deployed against participants of the Women Political Leaders (WPL) Summit in Brussels, a summit focusing on gender equality and women in politics.
Bleeping Computer
Between July and September, DarkGate malware attacks have used compromised Skype accounts to infect targets through messages containing VBA loader script attachments.
The Hacker News
A new cyber campaign targets EU military & political leaders focusing on gender equality. The cyber collective behind it blurs lines between financial
The Hacker News
DarkGate malware is now spreading through instant messaging apps like Skype & Microsoft Teams.
DarkReading
A plurality of the targets in the ongoing campaign have been based in the Americas.
Trend Micro
We detail an ongoing campaign abusing messaging platforms Skype and Teams to distribute the DarkGate malware to targeted organizations. We also discovered that once DarkGate is installed on the victimâs system, additional payloads were introduced to the environment.
-1-1.webp)
Cyber Security News
Top 10 Best SaaS Security Tools. 1. DoControl, 2. Splunk, 3. Zscaler, 4. Qualys, 5. Proofpoint, 6. Veracode, 7. Okta, 8. Trend Micro.
The Hacker News
PEACHPIT alert! This ad fraud botnet, linked to China's BADBOX operation, targeted 15M+ Android & iOS users. Learn how threat actors exploited devices
Cyber Security News
The maker of ChatGPT, OpenAI, is looking at making its own artificial intelligence chips, which are necessary for operating the highly popular chatbot.
Cyber Security News
DevOps refers to a collection of processes and technologies used in software development and IT operations that reduce the system development life cycle and enable continuous delivery.
Trend Micro
Digitalization has changed the business environment of the electric power industry, exposing it to various threats. This webinar will help you uncover previously unnoticed threats and develop countermeasures and solutions.
SecurityWeek
The Zero Day Initiative (ZDI) will host a new Automotive Pwn2Own at the Automotive World Conference in Tokyo, January 24 to 26, 2024.
CSO
Open letter claims current provisions will create new threats that undermine the security of digital products and individuals.
The Hacker News
Iranian cyber group OilRig strikes again with spear-phishing campaign, deploying a new Menorah malware for cyberespionage.
The Record
Suspected Iranian hackers recently launched a new cyber espionage operation, infecting their victims with the newly discovered Menorah malware, according to a report published Friday.
Trend Micro
We observed and tracked the advanced persistent threat (APT) APT34 group with a new malware variant accompanying a phishing attack comparatively similar to the SideTwist backdoor malware. Following the campaign, the group abused a fake license registration form of an African government agency to target a victim in Saudi Arabia.
Bleeping Computer
A Chinese cyber-espionage hacking group tracked as Budworm has been observed targeting a telecommunication firm in the Middle East and a government entity in Asia using a new variant of its custom 'SysUpdate' backdoor.
The Hacker News
BlackTech, a notorious state-backed hackers from China, are using router backdoors to quietly to breach government, tech, and media sectors in the U.S
The Hacker News
Budworm, a China-linked group, strikes again with updated malware tools, targeting government and telecom entities.
Bleeping Computer
A joint cybersecurity advisory by the FBI, NSA, CISA, and the Japanese NISC (cybersecurity) and NPA (police) sheds light on the techniques the Chinese threat actors known as BlackTech use to attack Japanese and U.S. organizations.
The Hacker News
OilRig, Iran's state-backed actor, aims at Israeli entities with spear-phishing tactics. Learn about the Outer Space and Juicy Mix campaigns.
The Record
The Monti ransomware gang took credit for the attack, claiming to have stolen 60 gigabytes of data from the university and giving them a deadline of October 9 to pay an undisclosed ransom.
Infosecurity News
The Trend Micro report observed that small organizations are being increasingly targeted by ransomware gangs, including LockBit and BlackCat
Cyber Security News
Recent reports indicate that an arbitrary code execution vulnerability has been discovered in a third-party Antivirus uninstaller module of Trend Micro Apex One.
The Hacker News
GitLab issues patches for CVE-2023-5009, a flaw allowing attackers to run pipelines as other users.
Cyber Security News
Threat actors behind this group are actively exploiting the CapraRAT Android malware to hijack Android devices by mimicking the YouTube app.
The Hacker News
Trend Micro releases patches for a critical security flaw, CVE-2023-41179, actively exploited in real-world attacks.
Bleeping Computer
Trend Micro fixed a remote code execution zero-day vulnerability in the Trend Micro's Apex One endpoint protection solution that was actively exploited in attacks.
DarkReading
"SprySOCKS" melds features from multiple previously known badware and adds to the threat actor's growing malware arsenal, Trend Micro says.
Infosecurity News
The new backdoor is being used by Earth Lusca to conduct cyber-espionage campaigns, primarily against governments in Asia and the Balkans
SecurityWeek
Trend Micro has patched CVE-2023-41179, an Apex One zero-day code execution vulnerability that has been exploited in attacks.
The Hacker News
Earth Lusca, a China-linked group, is using a stealthy Linux backdoor called SprySOCKS to target government entities worldwide.
SecurityWeek
SecurityWeek interviews Casey Ellis, founder, chairman and CTO at Bugcrowd, best known for operating bug bounty programs for organizations.
Trend Micro
Behind the scenes of the world of vulnerability intelligence and threat hunting
Ars Technica
SprySOCKS borrows from open source Windows malware and adds new tricks.
Cyber Security News
Best Software Define Perimeter Tools & Software : 1. Perimeter 81 SDP 2. Good Access 3. Twingate SDP 4. NetMotion SDP 5. Appgate SDP and more.
Bleeping Computer
A Chinese espionage-focused hacker tracked as 'Earth Lusca' was observed targeting government agencies in multiple countries, using a new Linux backdoor dubbed 'SprySOCKS.'
Trend Micro
While monitoring Earth Lusca, we discovered an intriguing, encrypted file on the threat actor's server â a Linux-based malware, which appears to originate from the open-source Windows backdoor Trochilus, which we've dubbed SprySOCKS due to its swift behavior and SOCKS implementation.
The Hacker News
Cybercriminals behind RedLine and Vidar info-stealers have shifted their focus towards ransomware, employing phishing campaigns.
DarkReading
In a notable shift in strategy, the threat actors are abusing code-signing certificates to spread a double whammy of infostealers and ransomware payloads.
The Hacker News
September 2023 Patch Tuesday â Microsoft addresses 59 bugs, including actively exploited zero-day flaws
Cyber Security News
HPE OneView is an integrated IT infrastructure management software that automates IT operations and streamlines infrastructure lifecycle management that includes computing, storage, and networking.
Cyber Security News
Wi-Fi CSI, unique among side channels, can infer keystrokes for password theft, posing data deficit challenges. That's why researchers proposed the WiKI-Eve to steal numerical passwords through BFI variations.
The Hacker News
New BLISTER update spotted! It's now part of SocGholish attacks, spreading an open-source C2 framework called Mythic.
Cyber Security News
A new sophisticated cyber espionage group named Earth Estries which overlaps notorious threat group FamousSparrow was unveiled.
Cyber Security News
The latest attack techniques, significant weaknesses, and exploits have all been highlighted. We also provide the most latest software upgrades available to keep your devices secure.
Infosecurity News
Trend Micro noted that âEarth Estriesâ employed advanced tactics to infiltrate networks
Latest Hacking News
Another threat for Android users has emerged online, emphasizing the need to use apps from legit sources only. Researchers have spotted a new Android malware, âMMRAT,â that targets devices via fake app stores. MMRAT Android Malware
Trend Micro
In this entry, we summarize the security analyses and investigations done on phishing-as-a-service 16shop through the years. We also outline the partnership between Trend Micro and Interpol in taking down the main administrators and servers of this massive phishing campaign.
The Hacker News
Earth Estries, a hacking group with pro-level skills, targets gov't and tech sectors across 6 countries.
DarkReading
A sophisticated threat actor managed to fly under the radar for three years, despite flexing serious muscle.
SecurityWeek
Earth Estries, a cyberspy group possibly linked to China, has targeted governments and tech firms in the US, Germany, South Africa and Asia.
The Hacker News
New Android banking trojan alert! Meet MMRat: stealthy malware targeting Southeast Asian users. It hijacks devices remotely for financial fraud.
The Record
Dustin Childs, the head of threat awareness for the Zero Day Initiative, explains to the Click Here podcast team how zero-day vulnerabilities make it into the hands of cybercriminals.
Bleeping Computer
A novel Android banking malware named MMRat utilizes a rarely used communication method, protobuf data serialization, to more efficiently steal data from compromised devices.
SecurityWeek
The newly identified MMRat Android trojan has been targeting users in Southeast Asia to remotely control devices and perform bank fraud.
Cyber Security News
Cybersecurity analysts at Trend Micro, Europol, and UNICRI jointly studied criminal AI exploitation, releasing the "Malicious Uses and Abuses of Artificial Intelligence".
Trend Micro
The Trend Micro Mobile Application Reputation Service (MARS) team discovered a new, fully undetected Android banking trojan, dubbed MMRat, that has been targeting mobile users in Southeast Asia since late June 2023.
Trend Micro
Learn the common OT and IT visibility and efficiency barriers, as well as how to get around them.
DarkReading
The offending ads and pages leveraged interest in AI to spread a malicious credential-stealing browser extension.
Cyber Security News
Best VPN Alternatives : 1. Perimeter 81 2. Tor 3. ProtonVPN 4. NordAccess 5. Cloudflare Access 6. I2P 7. Checkpoint Secure SD-WAN
Trend Micro
Global threat intelligence helps to disrupt thousands of African cyber crimes networks
Latest Hacking News
Heads up, WinRAR users! Itâs time to update your systems with the latest WinRAR version to avoid security risks. The developers have patched a severe security flaw in WinRAR that could allow remote code execution
Security Affairs
Israel and US government agencies announced the BIRD Cyber Program, an investment of roughly $4M in projects to enhance the cyber resilience of critical infrastructure. The BIRD Cyber Program is a joint initiative from the Israel National Cyber Directorate (INCD), the Israel-US Binational Industrial Research and Development (BIRD) Foundation, and the US Department of Homeland [âŚ]
Trend Micro
Ed Cabrera, former CISO of the US Secret Service and current Chief Cybersecurity Officer for Trend Micro, explains why Federal agencies are slow to comply with Biden's cybersecurity executive order.
Cyber Security News
Best ZTNA Solutions: 1. Perimeter 81 2. Zscaler 3. Cisco 4. Fortinet 5. Cloudflare 6. Akamai 7. Palo Alto Networks 8. Forcepoint.
Cyber Security News
Best Enterprise Remote Access Software: 1. Perimeter81 2. TeamViewer 3. Chrome Remote Desktop 4. AnyDesk 5. GoToMyPC 6. RemotePC
Bleeping Computer
While there was quite a bit of ransomware news this week, the highlighted story was the release of Jon DiMaggio's third article in the Ransomware Diaries series, with the focus of this article on the LockBit ransomware operation.
SecurityWeek
Israel and US have announced plans to invest close to $4 million in projects to improve the security of critical infrastructure systems.
The Record
A four-month international crime-fighting operation in Africa resulted in 14 arrests and the removal of infrastructure used by cybercriminals across the continent.
Trend Micro
Private 5G networks offer businesses enhanced security, reliability, and scalability. Learn more about why private 5G could be the future of secure networking.
DarkReading
Attackers use remote monitoring and management tools at MSPs to gain unfettered access to target networks.
The Record
The Monti hacker gang has resumed its operations after a two-month break, this time claiming to target legal and government entities with a fresh Linux-based ransomware variant.
Security Affairs
Monti Ransomware operators returned, after a two-month pause, with a new Linux variant of their encryptor. The Monti ransomware operators returned, after a two-month break, with a new Linux version of the encryptor. The variant was employed in attacks aimed at organizations in government and legal sectors. The Monti group has been active since June 2022, [âŚ]
The Hacker News
Monti ransomware creators return with an upgraded Linux version.
Trend Micro
The unveiling of the first-ever Open Worldwide Application Security Project (OWASP) risk list for large language model AI chatbots was yet another sign of generative AIâs rush into the mainstreamâand a crucial step toward protecting enterprises from AI-related threats.
Bleeping Computer
The Monti ransomware has returned to action after a two-month hiatus, now targeting primarily legal and government organizations, and VMware ESXi servers using a new Linux variant that is vastly different from its predecessors.
DarkReading
Global law enforcement operation leads to arrests of suspects behind sale of popular phishing kits.
Trend Micro
The latest study said that OT security is less mature in several capabilities than IT security, but most organizations are improving it.
Trend Micro
The Monti ransomware collective has restarted their operations, focusing on institutions in the legal and governmental fields. Simultaneously, a new variant of Monti, based on the Linux platform, has surfaced, demonstrating notable differences from its previous Linux-based versions.
Bleeping Computer
While some ransomware operations claim not to target hospitals, one relatively new ransomware gang named Rhysida doesn't seem to care.
Bleeping Computer
The Rhysida ransomware as a service (RaaS) operation that emerged in May 2023 is gradually leaving the period of obscurity behind, as a recent wave of attacks on healthcare organizations has forced government agencies and cybersecurity companies to pay closer attention to its operations.
The Hacker News
Latest report uncovers connection between China's Ministry of State Security hackers and global cyber attacks.
Infosecurity News
Indonesian admin arrested in multi-national operation
The Hacker News
Microsoft's Patch Tuesday for August 2023 addresses 74 vulnerabilities in its software, including 6 Critical and 67 Important security flaws.
Trend Micro
In this blog entry, we will provide details on Rhysida, including its targets and what we know about its infection chain.
The Hacker News
đ¨ Yashma ransomware is on the rampage, hitting English-speaking nations, Bulgaria, China, and Vietnam! Leaked builders are fueling these attacks.
Security Affairs
A new campaign targets Redis servers, this time the malware employed in the attacks is a new variant of the SkidMap malware. Skidmap is a piece of crypto-miner detected by Trend Micro in September 2019 while it was targeting Linux machines. The malicious code used kernel-mode rootkits to evade detection, it differs from similar miners because [âŚ]
The Hacker News
Attention Linux users! A dangerous new variant of SkidMap malware is targeting vulnerable Redis services across various distributions.
Trend Micro
In June 2023, Trend Micro observed an upgrade to the evasion techniques used by the Batloader initial access malware, which weâve covered in previous blog entries.
Trend Micro
In this entry, we detail our analysis of how the TargetCompany ransomware abused an iteration of fully undetectable (FUD) obfuscator engine BatCloak to infect vulnerable systems.
The Hacker News
đ Threat actors are targeting Linux systems in South Korea using the open-source rootkit Reptile.
Trend Micro
The latest study said that enterprise SOCs are expanding their responsibilities to the OT domain, but major visibility and skills-related challenges are causing roadblocks.
Cyber Security News
Best Malware protection software and solutions : 1. Perimeter81 2. Norton 3. McAfee 4. Kaspersky 5. Bitdefender 6. Avast 7. ESET 8. AVG.
The Hacker News
Beware of CherryBlos: the new Android malware that's out to steal your cryptocurrency!
DarkReading
The malware, along with a sister strain dubbed "FakeTrade," was found lurking in Google Play.
Ars Technica
OCR isn't the only advanced technique used by "CherryBlos" apps.
Bleeping Computer
Two new Android malware families named 'CherryBlos' and 'FakeTrade' were discovered on Google Play, aiming to steal cryptocurrency credentials and funds or conduct scams.
Naked Security
Fascinating fun (with a serious and educational side) â listen now! Full transcript available inside.
The Hacker News
Researchers warn of Nitrogen, a malvertising campaign infecting enterprise networks via Google Search and Bing ads. Targets users seeking IT tools.
Cyber Security News
The Zenbleed vulnerability that is documented recently puts more than 60 percent of AWS environments at risk, impacting AMD Zen 2 processors.
Naked Security
You need to turn on a special setting to stop (the code you wrote to stop [the code you wrote to improve performance] from reducing performance) from reducing security.
Bleeping Computer
A new 'Nitrogen' initial access malware campaign uses Google and Bing search ads to promote fake software sites that infect unsuspecting users with Cobalt Strike and ransomware payloads.
SecurityWeek
Perimeter81 botched the responsible disclosure process for a privilege escalation vulnerability found in its macOS application.
The Record
Two new vulnerabilities have been found in a popular brand of baseboard software used in millions of devices worldwide.
Trend Micro
A single-platform approach delivers value greater than the sum of its parts
The Hacker News
Mallox ransomware surges 174% in 2023, employing double extortion tactics by stealing data before encryption.
SecurityWeek
The process of encouraging secure cyber habits in end users is evolving from traditional awareness training toward changing user behavior.
Infosecurity News
Lookout attributed WyrmSpy and DragonEgg to APT41 due to overlapping Android signing certificates
SecurityWeek
Over a dozen vulnerabilities patched by GE in its Cimplicity HMI/SCADA product are reminiscent of ICS attacks conducted by Russian Sandworm.
The Record
The Judiciary Committee approved the so-called Fourth Amendment is Not for Sale Act, which has unusual momentum in the politically divided House.
DarkReading
Attackers show renewed relentlessness in exploiting OS vulnerabilities that also circumvent defense and detection measures.
The Hacker News
A sophisticated threat actor is targeting Pakistan government entities through a trojanized version of the E-Office application.
The Hacker News
FIN8, known for targeting PoS systems, is now using Sardonic backdoor to deploy BlackCat ransomware
Trend Micro
Trend Micro and INTERPOL collaborate to create a safer digital world
CSO
Israeli cybersecurity startup Orca has accused Wiz of taking its ârevolutionary inventionsâ and creating a âcopycat cloud securityâ platform.
Infosecurity News
Trend Micro found a backdoor previously exploited by various Chinese threat actors in a popular application used by Pakistanâs government agencies
The Record
An unknown hacker group compromised a Pakistani government app in order to infect victims with the China-linked Shadowpad malware, researchers have found.
Cyber Security News
Best Mobile app security scanners: 1. Android Debug Bridge 2. SandDroid 3. App-Ray4. Drozer 5. Synopsys 6. Quixxi 7. StacoAn 8. Ostorlab
DarkReading
Kernel mode driver can download second-stage payload directly to memory, allowing threat actors to evade endpoint detection and response tools.
Trend Micro
Embracing platform approach as the path to enhanced security and resilience
Trend Micro
An analysis of advanced persistent threat (APT) group Red Menshenâs different variants of backdoor BPFDoor as it evolves since it was first documented in 2021.
Infosecurity News
Banks and financial service providers have emerged as attractive targets for the most prominent ransomware groups
-1.webp)
Cyber Security News
A self-signed China-originated Rootkit acts as a universal downloader targeting gaming sectors to exfiltrate sensitive information.
SecurityWeek
Microsoft has revoked signed drivers used for post-exploitation activity, in many cases by Chinese cybercriminals.
The Hacker News
A new rootkit signed by Microsoft has been discovered, targeting the gaming sector in China.
The Record
One of the U.S.âs most popular zoos has been hit with a cyberattack involving the theft of employee and vendor information, and a likely offshoot of the Royal ransomware gang is taking credit.
Bleeping Computer
Today is Microsoft's July 2023 Patch Tuesday, with security updates for 132 flaws, including six actively exploited and thirty-seven remote code execution vulnerabilities.
DarkReading
As NATO mulls Ukrainian membership, the threat group is targeting supporters of Ukraine with a backdoor and exploitation of the Microsoft remote code execution (RCE) flaw known as Follina.
The Hacker News
Protect your systems against Big Head ransomware's diverse attack vectors! It's not just about encryptionâit also incorporates a file infector.
The Record
âThe authors of RedDriver appear to be skilled in driver development and have deep knowledge of the Windows operating system,â researchers at Cisco Talos said.
Bleeping Computer
A threat actor referred to as 'RomCom' has been targeting organizations supporting Ukraine and guests of the upcoming NATO Summit set to start tomorrow in Vilnius, Lithuania.
DarkReading
Cybercriminals lining up to score off Amazon Prime Day shoppers, who spent more than $22B in US online sales alone last year, according to estimates.
Infosecurity News
Action Fraud figures also reveal increase in social media hacking
Bleeping Computer
Security researchers have dissected a recently emerged ransomware strain named 'Big Head' that may be spreading through malvertising that promotes fake Windows updates and Microsoft Word installers.
Ars Technica
Just in time for the weekend: another unauthenticated SQL injection flaw!
The Hacker News
This multi-step vishing attack combines hi-tech malware, voice traffic routing, and social engineering to deceive victims into micro-loans.
Security Affairs
Progress released security patches for a new critical SQL injection vulnerability affecting its MOVEit Transfer software. Progress is informing customers of a new critical SQL injection vulnerability, tracked as CVE-2023-36934, in its MOVEit Transfer software. MOVEit Transfer software recently made the headlines due to the massive Clop ransomware hacking campaign exploiting a vulnerability in the [âŚ]
Trend Micro
We analyze the technical details of a new ransomware family named Big Head. In this entry, we discuss the Big Head ransomwareâs similarities and distinct markers that add more technical details to initial reports on the ransomware.
Infosecurity News
A study by the SANS Institute and Trend Micro found major discrepancies between IT and OT asset visibility within organizations
The Hacker News
BlackCat ransomware now spreading via malvertising! Watch out for rogue installers disguised as legitimate apps like WinSCP.
Bleeping Computer
The BlackCat ransomware group (aka ALPHV) is running malvertizing campaigns to lure people into fake pages that mimic the official website of the WinSCP file-transfer application for Windows but instead push malware-ridden installers.
Trend Micro
We found that malicious actors used malvertising to distribute malware via cloned webpages of legitimate organizations. The distribution involved a webpage of the well-known application WinSCP, an open-source Windows application for file transfer. We were able to identify that this activity led to a BlackCat (aka ALPHV) infection, and actors also used SpyBoy, a terminator that tampers with protection provided by agents.
Cyber Security News
20 Best Identity Management Solutions - 1. Perimeter81 2. Okta 3. Microsoft Azure Active Directory 4. OneLogin 5. Ping Identity 6. SailPoint.
DarkReading
Virtual kidnapping is just one of many new artificial intelligence attack types that threat actors have begun deploying, as voice cloning emerges as a potent new imposter tool.
The Hacker News
đ Discover the newly unearthed Windows-based information stealer, ThirdEye! This malware operates stealthily, harvesting sensitive data from infected
Bleeping Computer
The Akira ransomware operation uses a Linux encryptor to encrypt VMware ESXi virtual machines in double-extortion attacks against companies worldwide.
Trend Micro
New uses for generative AI are being introduced every dayâbut so are new risks.
ZDNet
The social media site has less than a month to respond or face fines of AU$700,000 ($474,670) a day.
The Hacker News
Chinese cyber espionage group Camaro Dragon expands global reach with a new self-propagating malware strain spreading via USB drives.
Cyber Security News
Best Penetration Testing Companies: 1. Crowdstrike 2. Secureworks 3. Rapid7 4. Acunetix 5. Trellix 6. Invicti 7. Cobalt 8. Intruder.
Trend Micro
Jon Clay and Ed Cabrera talk about the MOVEit breaches and more in the video series #TrendTalksBizSec
Trend Micro
This is the third installment of a three-part technical analysis of the fully undetectable (FUD) obfuscation engine BatCloak and SeroXen malware. In this entry, we document the techniques used to spread and abuse SeroXen, as well as the security risks, impact, implications of, and insights into highly evasive FUD batch obfuscators.