Category: Uncategorized
-
Russian Cyberspies Targeting Cloud Infrastructure via Dormant Accounts Ionut Arghire
US government and allies expose TTPs used by notorious Russian hacking teams and warn of the targeting of dormant cloud accounts. The post Russian Cyberspies Targeting Cloud Infrastructure via Dormant Accounts appeared first on SecurityWeek. Read More
-
Cyber Insights 2024: Artificial Intelligence Kevin Townsend
AI will allow attackers to improve their attacks, and defenders to improve their defense. Over time, little will change — but the battle will be more intense. The post Cyber Insights 2024: Artificial Intelligence appeared first on SecurityWeek. Read More
-
Zyxel Patches Remote Code Execution Bug in Firewall Products Ryan Naraine
Taiwanese networking vendor Zyxel confirms security flaws in firewall and access points put users at risk of remote code execution attacks. The post Zyxel Patches Remote Code Execution Bug in Firewall Products appeared first on SecurityWeek. Read More
-
From Open Source to Enterprise Ready: 4 Pillars to Meet Your Security Requirements Marc Solomon
Open source is a great way to test the waters and define requirements. But when looking at putting a platform into production, an enterprise-ready solution will ensure you can keep up with business demands. The post From Open Source to Enterprise Ready: 4 Pillars to Meet Your Security Requirements appeared first on SecurityWeek. Read More
-
New IDAT Loader Attacks Using Steganography to Deploy Remcos RAT [email protected] (The Hacker News)
Ukrainian entities based in Finland have been targeted as part of a malicious campaign distributing a commercial remote access trojan known as Remcos RAT using a malware loader called IDAT Loader. The attack has been attributed to a threat actor tracked by the Computer Emergency Response Team of Ukraine (CERT-UA) under the moniker UAC-0184. “The…
-
Critical Flaw in Popular ‘Ultimate Member’ WordPress Plugin Ionut Arghire
The vulnerability carries a CVSS severity score of 9.8/10 and affects web sites running the Ultimate Member WordPress membership plugin. The post Critical Flaw in Popular ‘Ultimate Member’ WordPress Plugin appeared first on SecurityWeek. Read More
-
State-Sponsored Group Blamed for Change Healthcare Breach Ionut Arghire
UnitedHealth Group is blaming a state-sponsored threat actor for a disruptive cyberattack on its subsidiary Change Healthcare. The post State-Sponsored Group Blamed for Change Healthcare Breach appeared first on SecurityWeek. Read More
-
LoanDepot Ransomware Attack Exposed 16.9 Million Individuals Ionut Arghire
Lending firm LoanDepot said the personal information of 16.9 million people was stolen in a ransomware attack in early January. The post LoanDepot Ransomware Attack Exposed 16.9 Million Individuals appeared first on SecurityWeek. Read More
-
8,000+ Subdomains of Trusted Brands Hijacked for Massive Spam Operation [email protected] (The Hacker News)
More than 8,000 subdomains belonging to legitimate brands and institutions have been hijacked as part of a sophisticated distribution architecture for spam proliferation and click monetization. Guardio Labs is tracking the coordinated malicious activity, which has been ongoing since at least September 2022, under the name SubdoMailing. The emails range from “counterfeit package delivery alertsRead…
-
LockBit Ransomware Gang Resurfaces With New Site Ionut Arghire
The LockBit ransomware operators announce a new leak site as they try to restore credibility after law enforcement takedown. The post LockBit Ransomware Gang Resurfaces With New Site appeared first on SecurityWeek. Read More