Category Security

A Russian security official has been charged with smuggling ammunition and dual-use technology, including various electronic devices that aided the Kremlin’s war machine. Vadim Konošcenok, 48, from Tallinn, was arrested in the Estonian capital and extradited to the United States…

July 17, 2023THNMoreMalware/Cyberthreat A Microsoft Word document exploiting a known remote code execution flaw has been used as a phishing lure to drop the following malware: lokibot About compromised systems. “LokiBot, also known as Loki PWS, is a well-known information-stealing…

July 17, 2023THNMoreCyber ​​Attack / Data Safety A Russian-linked threat actor known as Gamaredon has been observed conducting data exfiltration operations within an hour of the initial compromise. “As the main compromise vector, most often emails and messages in messengers…

July 15, 2023THNMoreArtificial Intelligence / Cyber ​​Crime Generative artificial intelligence (AI) is all the rage these days, so why is this technology being repurposed by malicious actors to their advantage, enabling an accelerated path to cybercrime? is probably not surprising.…

July 15, 2023THNMoreCyber ​​Attack / Enterprise Security Microsoft announced on Friday that a source code validation error allowed a malicious actor known as Storm-0558 to forge Azure Active Directory (Azure AD) tokens using a Microsoft Account (MSA) consumer signing key…

The UK financial services regulator has warned banks to closely monitor what steps they take to mitigate the growing risk of AI-powered fraud. Nikhil Rathi, CEO of the Financial Conduct Authority (FCA), said in a speech at the Financial Conduct…

Windows users are once again being targeted by sophisticated malware known as LokiBot, which spreads through malicious Office documents. According to a new advisory by Fortinet security researcher Cara Lin, attackers can use known vulnerabilities such as CVE-2021-40444 and CVE-2022-30190…

July 14, 2023THNMoreEmail security/vulnerability Zimbra has warned that its email software has a serious zero-day security flaw that is being exploited in the wild. “A security vulnerability has surfaced in Zimbra Collaboration Suite version 8.8.15 that may affect the confidentiality…

A federal grand jury indicts a former employee of a contractor who runs a sewage treatment plant in a town in California who may have remotely turned off a critical system, endangering public health and safety. bottom. Rambler Galler, 53,…

A new group of threat actors has been observed conducting a series of cyberattacks targeting government agencies, military entities, and civilian users in Ukraine and Poland. According to Cisco Talos’ new advisory, the malicious campaign began in April 2022 and…