Axonius, a well entrenched player in the attack surface management space, has banked another $200 million in late-stage funding from a roster of major investors. The company, which has roots in Israel, described the financing as a Series E extension led by existing investors Accel and Lightspeed Ven…
Investment firm Team8 has raised $500 million in new funds, bringing its total assets under management (AUM) to over $1 billion. The Tel Aviv and New York-based company divides its activities into two separate areas: venture creation and venture capital. The first helps entrepreneurs get new ideas o…
Twenty-seven cybersecurity-related merger and acquisition (M&A) deals were announced in February 2024. An analysis conducted by SecurityWeek shows that more than 400 cybersecurity M&A deals were announced in 2023, with a drop seen in both volume and disclosed deal value. Here is…
The Düsseldorf Police in Germany have made a significant stride in the ongoing battle against cybercrime by dismantling Crimemarket, the largest cybercrime market in the country, with over 180,000 users. This illicit trading platform served as a hub for trading illegal drugs, narcotics, and cybercri…
Ransomware cybercrime gangs GhostSec and Stormous have teamed up in widespread double-extortion attacks.
JetBrains on Monday released patches for two authentication bypass vulnerabilities in the build management server TeamCity, including a critical-severity flaw leading to full compromise. Tracked as CVE-2024-27198 (CVSS score of 9.8) and CVE-2024-27199 (CVSS score of 7.3), the security defects impact…
A plugin for the open source network security monitoring tool Zeek is affected by several vulnerabilities that threat actors could leverage in attacks aimed at industrial control system (ICS) environments. The existence of the vulnerabilities was disclosed recently by the US security agency CISA. Th…
Startups and scales-ups are often cloud-first organizations and rarely have sprawling legacy on-prem environments. Likewise, knowing the agility and flexibility that cloud environments provide, the mid-market is predominantly running in a hybrid state, partly in the cloud but with some on-prem assets.
While there has been a bit of a backswing against the pricing and lock-in presented when using
A new DNS threat actor dubbed Savvy Seahorse is leveraging sophisticated techniques to entice targets into fake investment platforms and steal funds.
“Savvy Seahorse is a DNS threat actor who convinces victims to create accounts on fake investment platforms, make deposits to a personal account, and then transfers those deposits to a bank in Russia,” Infoblox said in a report
More than 225,000 logs containing compromised OpenAI ChatGPT credentials were made available for sale on underground markets between January and October 2023, new findings from Group-IB show.
These credentials were found within information stealer logs associated with LummaC2, Raccoon, and RedLine stealer malware.
“The number of infected devices decreased slightly in mid- and late
The threat actor known as TA577 has been observed using ZIP archive attachments in phishing emails with an aim to steal NT LAN Manager (NTLM) hashes.
The new attack chain “can be used for sensitive information gathering purposes and to enable follow-on activity,” enterprise security firm Proofpoint said in a Monday report.
At least two campaigns taking advantage of this
Cisco Talos documents GhostSec’s expanded operations, including a Golang rework of GhostLocker (GhostLocker 2.0) that persists via the Windows Startup folder, communicates with a C2 at 94[.]103[.]91[.]246, exfiltrates targeted documents via HTTP POST, then enc…
The Main Intelligence Directorate (GUR) of Ukraine’s Ministry of Defense claims that it hacked the Russian Ministry of Defense. The Main Intelligence Directorate (GUR) of Ukraine’s Ministry of Defense announced it had breached the Russian Ministry of Defense servers as part of a special operation, and exfiltrated confidential documents. Stolen documents…
Zscaler ThreatLabz observed a campaign (Dec 2023–Jan 2024) that hosted fraudulent Skype, Google Meet, and Zoom websites to deliver Android and Windows RATs. Clicking Android links returned SpyNote APKs while Windows links delivered BAT stagers that fetched DCR…
Kroll CTI identified a VBScript-based malware family they call TODDLERSHARK, deployed after exploitation of ConnectWise ScreenConnect vulnerabilities (CVE-2024-1708 / CVE-2024-1709) and resembling the BABYSHARK toolset. The attack chain uses mshta to fetch a p…