Category Security

June 16, 2023Ravi LakshmananCyber ​​Attack / Ransomware Progress Software on Thursday revealed a third vulnerability affecting its MOVEit Transfer application as the Cl0p cybercriminal gang deployed extortion tactics against affected companies. The new flaw, which has not yet been assigned…

June 15, 2023Ravi LakshmananCyber ​​War / Intel Threat Russian threat actor known as Shamushi continues cyberattacks against Ukrainian organizations with the aim of stealing sensitive information from compromised environments. Targets of the recent intrusions, which began between February and March…

The infamous LockBit ransomware variant has earned blackmailers nearly $100 million from U.S. victims alone since January 2020, allied security officials revealed in a new advisory yesterday. The US Cybersecurity and Infrastructure Security Agency (CISA), the UK National Cybersecurity Center…

June 15, 2023Ravi Lakshmanansoftware supply chain A New Kind of Software Supply Chain Attack Targets Open Source Projects Reveals Attackers Can Gain Control of Expired Amazon S3 Buckets and Deliver Malicious Binaries Without Modifying the Modules themselves became. “Malicious binaries…

Global organizations are becoming more resilient to cyber breaches, with more than three-quarters (76%) of CISOs reporting no major breaches in the past year, according to survey of ClubCISO members . A total of 182 members of our private member…

June 15, 2023hacker newsbrowser security / data security The innovative technology of GenAI tools such as ChatGPT has posed significant risks to an organization’s sensitive data.But what do we really know about this risk? new research Browser Security company LayerX…

Ransomware has emerged as the most prevalent form of malware as a service (MaaS) over the past seven years. This data is based on a new report by the Kaspersky Digital Footprint Intelligence team that analyzed 97 malware families distributed…

June 15, 2023Ravi LakshmananCryptocurrency/ransomware Ransomware attackers and cryptocurrency scammers have joined nation-state actors abusing cloud mining services to launder digital assets, new research reveals. “Cryptocurrency mining is an important part of our industry, but it also has a special appeal…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) have released joint guidance on hardening baseboard management controllers (BMCs). The document, published Wednesday, aims to address an overlooked vulnerability in BMC that could be a…

June 15, 2023Ravi Lakshmanan So-called China-related threat actors UNC4841 Believed to be related to the exploitation of a zero-day vulnerability recently patched in Barracuda Email Security Gateway (ESG) appliances since October 2022. “UNC4841 is the espionage behind this widespread campaign…