News
-
"Researchers Report First Instance of Automated SaaS Ransomware Extortion"The 0mega ransomware group has effectively executed an extortion attack against the SharePoint Online environment of a company without using a compromised endpoint, as is typically the case with these types of attacks. Instead, the threat group appears… -
"How Analytics Tools, Third-Party Tracking Tech Pose Threats to Patient Privacy"Transferring sensitive data to non-Health Insurance Portability and Accountability Act (HIPAA)-covered entities may result in compliance complications, data breaches, lawsuits, and patient privacy risks. Third-party tracking tools promise functionality…
-
"Microsoft Warns of Multi-Stage AiITM Phishing and BEC Attacks"Microsoft discovered multi-stage adversary-in-the-middle (AiTM) phishing and Business Email Compromise (BEC) attacks targeting financial service organizations. In AiTM phishing, threat actors set a proxy server between a target user and the website the…
-
"Log4J Exploits May Rise Further as Microsoft Continues War on Phishing"Researchers expect a rise in Log4J exploits as cybercriminals continue to find new methods to circumvent the ongoing implementation of Microsoft's anti-phishing measures. Microsoft blocked the enablement of VBA macros in Office documents by default in…
-
"New Entrants to Ransomware Unleash Frankenstein Malware"Ransomware hackers are pushing the concept of code reuse to its limits. In their rush to make money, some new cybercriminals are turning to previous ransomware groups' discarded remnants, piecing together ransomware rather than developing their own…
-
"Nvidia's AI Software Tricked Into Leaking Data"According to researchers at the San Francisco-based company Robust Intelligence, a feature in Nvidia's Artificial Intelligence (AI) software can be manipulated to disregard safety restrictions and reveal private information. The "NeMo Framework"…
-
"Confidential Data Downloaded From UK Regulator Ofcom in Cyberattack"Ofcom, Britain's communications regulator, has disclosed that hackers exploiting a flaw in Progress Software's MOVEit Transfer file transfer app downloaded confidential information on companies it regulates. A spokesperson for Ofcom revealed that the…
-
"Barracuda ESG Zero-Day Exploit Hits Australia's ACT Government"The Australian Capital Territory (ACT) Government is among an estimated 5 percent of Barracuda Networks' Email Security Gateway (ESG) customers who have been instructed to remove and replace their appliances due to a zero-day flaw compromise. Barracuda…
-
"Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Undetectable"Since September 2022, a fully undetectable (FUD) malware obfuscation engine named BatCloak has been used to launch different malware strains while persistently bypassing antivirus detection. According to Trend Micro researchers, the samples enable threat…
-
"Hackers Steal $3 Million by Impersonating Crypto News Journalists"A hacking group identified as "Pink Drainer" impersonates journalists in phishing attacks to compromise Discord and Twitter accounts in order to steal cryptocurrency. According to ScamSniffer analysts, Pink Drainer effectively compromised the accounts of…
-
"Fortinet Patches Pre-auth RCE, Update Your Fortigate Firewalls ASAP!"Fortinet has released multiple versions of FortiOS, the operating system/firmware powering its Fortigate firewalls and other devices. They contain a fix for CVE-2023-27997, a Remote Code Execution (RCE) vulnerability that an unauthenticated attacker can…
-
"Cl0P Gang Sat on Exploit for MOVEit Flaw for Nearly 2 Years"The Cl0p ransomware group lingered on a zero-day vulnerability it discovered in Progress Software's MOVEit Transfer file transfer application for nearly two years before beginning to exploit it. During this holding period, group members launched periodic…