Category Security

Threat Analysis: VMware ESXi Attacks Soared in 2022

The ESXiArgs ransomware attack, which began infecting VMware ESXi hypervisor servers on February 2, 2023, is the latest in a long list of malicious campaigns exploiting vulnerabilities in ESXi. Threat intelligence firm Recorded Future has been tracking ESXi-focused ransomware since…

Microsoft Patches Three Zero-Day Bugs This Month

Microsoft has released patches for over 70 CVEs this month. This includes three zero-day vulnerabilities currently being exploited. The first is CVE-2023-23376, a privilege escalation flaw in the Common Log File System (CLFS) driver. Satnam Narang, senior staff researcher at…

Google Rolling Out Privacy Sandbox Beta on Android 13 Devices

February 15, 2023Rabbi LakshmananPrivacy / Technology Google announced Tuesday that it will officially roll out Android’s Privacy Sandbox Beta to eligible mobile devices running Android 13. “Privacy Sandbox Beta offers new APIs designed around privacy and uses no identifiers that…

Hackers Breach Pepsi Bottling Ventures’ Network

Pepsi Bottling Ventures (PBV) has revealed a network breach that resulted in the theft of confidential employee personal and financial information. The Company reserves the right to use emails sent to consumers (and news filed with the Montana Attorney General…

Massive AdSense Fraud Campaign Uncovered

February 14, 2023Rabbi LakshmananAd Fraud / Online Security The attackers behind the black hat redirect malware campaign scaled the campaign up to infect over 10,800 websites using over 70 fake domains mimicking URL shortening services. Sucuri researcher Ben Martin said…

Chinese Hackers Infiltrate South American Diplomatic Networks

Chinese government-backed threat actor DEV-0147 has been spotted targeting South American diplomatic organizations using the ShadowPad remote access Trojan (RAT), also known as PoisonPlug. Microsoft shared its findings on Twitter On Monday, it said the threat actor’s new campaign represented…