North Korean threat actors have exploited the recently disclosed security flaws in ConnectWise ScreenConnect to deploy a new malware called TODDLERSHARK.
According to a report shared by Kroll with The Hacker News, TODDLERSHARK overlaps with known Kimsuky malware such as BabyShark and ReconShark.
“The threat actor gained access to the victim workstation by exploiting the exposed setup wizard
The widespread sale of credentials obtained from AI-based gaming platforms and services is a worrying trend in the cyber underworld, as shown by a new analysis by antivirus company Kaspersky. An astounding 3.6 crore credentials, including login and password information, have been stolen and sold on…
Dtex Systems, a Silicon Valley company working on technology to automate the detection of insider threats, has raised $50 million in late-stage funding led by CapitalG, the investment arm of Google’s parent company Alphabet. The San Jose, Calif. company said the Series E brings the total raised to $…
The BlackCat ransomware gang is pulling an exit scam, trying to shut down and run off with affiliates’ money by pretending the FBI seized their site and infrastructure. […]
Every month the Nextron Threat Research Team (NTRT) shares insights into evasive threats that we’ve seen in the wild via our Valhalla service. The aim is to highlight interesting samples our rules detected and have or had very low detection rates as reported by VirusTotal scanning.
Please note that we are aware…
In the dynamic realm of blockchain technology, a groundbreaking innovation is emerging as a beacon of privacy and security: Zero-Knowledge Proofs (ZKPs). These cryptographic marvels are poised to redefine the landscape of blockchain transactions, offering unparalleled privacy and integrity. Let’s de…
Authorities in Delhi are cautioning residents to remain vigilant against a recent surge in cyber fraud cases known as ‘digital house arrest,’ with over 200 incidents reported monthly in the capital.Described as a serious threat by senior officials, this tactic employed by cybercriminals aims to coer…
Getting rid of passwords completely isn’t a realistic option for most orgs, but there are things you can do to make them more secure. Learn more from Specops Software on maximizing security while mitigating costs. […]
The use of biometrics is increasingly common for authentication, and organizations must make sure their data security solutions protect what may be a new goldmine for hackers.
Integrating digital technologies and increased connectivity in industrial operations heightens the risk of cybersecurity threats to Operational Technology (OT). Regulatory compliance standards and directives, such as those outlined by NIST, NIS2, ISA, and IEC, are pivotal in mitigating OT cybersecur…
Minnesota hospitals are facing financial challenges due to a recent cyberattack on a subsidiary of UnitedHealth Group, based in Minnetonka. Patient care and medication availability remain stable, but hospitals are unable to process claims for payment or estimate costs for patients due to ongoing sys…
The North Korean government-backed hackers were able to gain a major victory when Microsoft left a zero-day vulnerability unpatched for six months after learning it was actively exploited for six months. As a result of this, attackers were able to take advantage of existing vulnerabilities, thereby…
Cloudflare on Monday announced a series of new security products that leverage AI, protect AI solutions, or defend against AI-enhanced phishing. To improve its customers’ analytics abilities, Cloudflare introduced an AI assistant in the Security Analytics section of its dashboard, to help identify a…
Cybereason researchers dissect a Python-based infostealer (nicknamed “Snake”) distributed via social-engineered archive files and hosted on public repositories, which harvests browser credentials and Facebook cookies. The stolen data is exfiltrated to messagin…
As artificial intelligence (AI) technologies advance, researchers are voicing concerns about the possibility of AI-fueled cyber-physical attacks on critical US infrastructure. Last month, the FBI warned that Chinese hackers might impair critical sectors such as water treatment, electrical, and trans…