kowatek

June 15, 2023Ravi LakshmananCyber ​​War / Intel Threat Russian threat actor known as Shamushi continues cyberattacks against Ukrainian organizations with the aim of stealing sensitive information from compromised environments. Targets of the recent intrusions, which began between February and March…

The infamous LockBit ransomware variant has earned blackmailers nearly $100 million from U.S. victims alone since January 2020, allied security officials revealed in a new advisory yesterday. The US Cybersecurity and Infrastructure Security Agency (CISA), the UK National Cybersecurity Center…

June 15, 2023Ravi Lakshmanansoftware supply chain A New Kind of Software Supply Chain Attack Targets Open Source Projects Reveals Attackers Can Gain Control of Expired Amazon S3 Buckets and Deliver Malicious Binaries Without Modifying the Modules themselves became. “Malicious binaries…

Global organizations are becoming more resilient to cyber breaches, with more than three-quarters (76%) of CISOs reporting no major breaches in the past year, according to survey of ClubCISO members . A total of 182 members of our private member…

June 15, 2023hacker newsbrowser security / data security The innovative technology of GenAI tools such as ChatGPT has posed significant risks to an organization’s sensitive data.But what do we really know about this risk? new research Browser Security company LayerX…

Ransomware has emerged as the most prevalent form of malware as a service (MaaS) over the past seven years. This data is based on a new report by the Kaspersky Digital Footprint Intelligence team that analyzed 97 malware families distributed…

June 15, 2023Ravi LakshmananCryptocurrency/ransomware Ransomware attackers and cryptocurrency scammers have joined nation-state actors abusing cloud mining services to launder digital assets, new research reveals. “Cryptocurrency mining is an important part of our industry, but it also has a special appeal…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have released joint guidance on hardening baseboard management controllers (BMCs). The document, published Wednesday, aims to address an overlooked vulnerability in BMC that could be a…

June 15, 2023Ravi Lakshmanan So-called China-related threat actors UNC4841 Believed to be related to the exploitation of a zero-day vulnerability recently patched in Barracuda Email Security Gateway (ESG) appliances since October 2022. “UNC4841 is the espionage behind this widespread campaign…

Microsoft Threat Intelligence has revealed a previously tracked threat actor (DEV-0586). Now known as “Cadet Blizzard”. In a tech blog post published Wednesday, the tech giant described the emerging threat and shared updates on the techniques, tools and infrastructure of…