Category Security

Microsoft has uncovered another Chinese cyber espionage operation that compromised at least 25 organizations, including the US government. The tech giant began investigating suspicious email activity following a customer report on June 16. It was later discovered that a Chinese…

July 13, 2023THNMoreCloud Security/Cryptocurrency As many as 196 hosts were infected as part of an aggressive cloud campaign staged by the TeamTNT group. silent bob. Ofek Itach and Assaf Morag, security researchers at Aqua, said, “The botnet operated by TeamTNT…

Mandiant has used a trail of destructive Russian-backed operations against Ukraine since February 2022 to invade neighboring Ukraine, with multiple different Russian threat clusters to pursue Russia’s intelligence-conflict objectives. observed the persistent use of the same repeatable strategy throughout the…

July 13, 2023THNMorecyber attack Government agencies, military organizations, and civilian users in Ukraine and Poland have been targeted as part of a series of campaigns aimed at stealing sensitive data and gaining persistent remote access to infected systems. This intrusion…

A new version of the Common Vulnerability Scoring System (CVSS 4.0) was made generally available by the Incident Response Security Team Forum (FIRST) on July 13, 2023. CVSS is an open industry standard for rating the severity of security vulnerabilities…

July 13, 2023THNMoreLinux / Vulnerability In a sign that cybersecurity researchers remain under the watchful eye of malicious actors, a proof-of-concept (PoC) has been found on GitHub that hides a backdoor with “clever” persistence methods. “This PoC is a wolf…

The White House has released an implementation plan for the US National Cybersecurity Strategy, which will be introduced in March 2023. The National Cybersecurity Strategy Implementation Plan (NCSIP), published July 13, 2023, aims to ensure transparency and coordination among U.S.…

A global email-based extortion scam is the work of a small group of scammers, according to new research from Barracuda Networks. The security vendor worked with Columbia University to analyze over 300,000 extortion emails they tracked over the course of…

July 13, 2023THNMoreOT/ICS, SCADA Cyber ​​Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified two security flaws affecting Rockwell Automation’s ControlLogix EtherNet/IP (ENIP) communication module models, including remote code execution and denial of service (DoS). ) could be…

A major nonprofit has warned that this year could set another record for data breaches after 951 publicly reported incidents in the second quarter. The Identity Theft Resource Center (ITRC) has tracked publicly reported data breaches and breaches since 2005.…