The private information of more than 28,000 people may have been accessed by unauthorized actors, thanks to a cyber incident at service provider Infosys McCamish — the same third party recently responsible for the Bank of America breach.
PRESS RELEASECOLUMBUS, Ohio — February 29, 2024: Veeam® Software, the #1 leader by market share in Data Protection and Ransomware Recovery, today announced the new Veeam Data Cloud, which is built on Microsoft Azure and delivers the confidence and reliability of the industry’s leading platform…
Among the latest to suffer from zero-day exploitation is Ivanti, a software company providing endpoint management and remote access solutions to various organizations, including U.S. federal agencies.
A gang of hackers specialized in business email compromise (BEC) attacks and tracked as TA4903 has been impersonating various U.S. government entities to lure targets into opening malicious files carrying links to fake bidding processes. […]
A pair of critical bugs could open the door to complete system compromise, including access to location information, iPhone camera and mic, and messages. Rootkitted attackers could theoretically perform lateral movement to corporate networks, too.
AttackIQ released an assessment template that emulates Sandworm’s post-compromise TTPs to help validate detection, prevention, and response controls—particularly against attacks targeting ICS/SCADA and disruptive operations. The template covers execution (RunD…
A Russian-language campaign aims to compromise corporate users on both Windows and Android devices by mimicking popular online collaboration applications.
Duvel Moortgat Brewery was hit by a ransomware attack late last night, bringing to a halt the beer production in the company’s bottling facilities […]
In the fast-paced world of technology, a revolutionary concept is gaining traction: Web3. Coined by computer scientist Gavin Wood, Web3 represents a paradigm shift towards a decentralized internet infrastructure, powered by blockchain technology. The traditional internet, often referred to as Web2,…
The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) has announced that a “cyber incident” forced it to take its corporate systems offline as a precaution. […]
Threat actors are targeting misconfigured and vulnerable servers running Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis services as part of an emerging malware campaign designed to deliver a cryptocurrency miner and spawn a reverse shell for persistent remote access.
“The attackers leverage these tools to issue exploit code, taking advantage of common misconfigurations and
A cryptojacking campaign involving Linux malware is targeting misconfigured Apache Hadoop, Confluence, Docker, and Redis instances with new and unique malicious payloads, cybersecurity firm Cado Security warns. As part of the campaign, the attackers employ four new Golang payloads to automate the di…
CRIL analyzed a campaign distributing the open-source information stealer SapphireStealer to Russian targets via a fake Russian government website and likely spam emails. The .NET executable displays an embedded PDF lure while stealthily collecting browser cre…
Cyber-physical systems security company Claroty on Wednesday announced raising $100 million in strategic growth funding, which brings the total investment secured by the firm to $735 million. Delta-v Capital, AB Private Credit Investors at AllianceBernstein, Standard Investments, Toshiba Digit…
VMware released security updates to fix critical sandbox escape vulnerabilities in VMware ESXi, Workstation, Fusion, and Cloud Foundation products, allowing attackers to escape virtual machines and access the host operating system. […]