CVE-2022-0847 aka Dirty Pipe vulnerability in Linux kernel
Last week, security researcher Max Kellermann discovered a high severity vulnerability in the Linux kernel, which was assigned the designation CVE-2022-0847. It affects the Linux kernels...
News
Webinar on cyberattacks in Ukraine – summary and Q&A
About the webinar On March 10, 2022 Kaspersky’s Global Research and Analysis Team (GReAT) shared their insights into the current...
CaddyWiper, a new data wiper hits Ukraine
Experts discovered a new wiper, tracked as CaddyWiper, that was employed in attacks targeting Ukrainian organizations. Experts at ESET Research...
Utility Cybersecurity: Situational Awareness Cuts Risk
Trend Micro has released a technical report on how the electric utility industry can gain situational awareness across entire network....
A massive DDoS attack hit Israel, government sites went offline
Many Israel government websites were offline after a cyberattack, defense sources claim that this is the largest-ever attack that hit...
De-Googling Carey Parker’s (and your) life: Lock and Code S03E06
Three years ago, a journalist for Gizmodo named Kashmir Hill wanted to understand what life was like without “Big Tech.”...
Ukraine is using Clearview AI’s facial recognition during the conflict
Ukraine’s defense ministry began using Clearview AI’s facial recognition technology to uncover Russian assailants, combat misinformation and identify the dead....
Anonymous claims to have hacked German subsidiary of Russian energy giant Rosneft
Anonymous claims to have hacked the systems of the German subsidiary of Russian energy giant Rosneft and stole 20TB of...
CISA list of 95 new known exploited vulnerabilities raises questions
On Friday March 3, the Cybersecurity and Infrastructure Security Agency (CISA) added a whopping number of 95 new known exploited...
Brazilian trojan impacting Portuguese users and using the same capabilities seen in other Latin American threats
Brazilian trojan impacting Portuguese users and using the same capabilities seen in other Latin American threats Introduction A new variant...
A week in security (March 7 – March 13)
Last week on Malwarebytes Labs: The struggle to reduce bug-fixing time is realUpdate now! Mozilla patches two actively exploited vulnerabilitiesGoogle...
Russia-Ukraine cyber conflict poses critical infrastructure at risk
While the Russia-Ukraine cyber conflict goes on, nation-state actors, crooks, and hacktivists continue to pose critical infrastructure at risk. Critical...
Anonymous sent a message to Russians: “remove Putin”
Anonymous has published a new message for Russian citizens inviting them to remove Putin that is sacrificing them and killing...
The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years
The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years. Lampion trojan...
Mar 06- Mar 12 Ukraine – Russia the silent cyber conflict
This post provides a timeline of the events related to the Russia invasion of Ukraine from the cyber security perspective....
Security Affairs newsletter Round 357 by Pierluigi Paganini
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free...
LockBit ransomware group claims to have hacked Bridgestone Americas
LockBit ransomware gang claimed to have hacked Bridgestone Americas, one of the largest manufacturers of tires. LockBit ransomware gang claimed...
Attackers use website contact forms to spread BazarLoader malware
Threat actors are spreading the BazarLoader malware via website contact forms to evade detection, researchers warn. Researchers from cybersecurity firm...
Russian Internet watchdog Roskomnadzor is going to ban Instagram
Russian Internet watchdog Roskomnadzor is going to ban Instagram in Russia to prevent the spreading of info related to the...
Ubisoft suffered a cyber security incident that caused a temporary disruption
Video game company Ubisoft has suffered a ‘cyber security incident’ that had a severe impact on games, systems, and services. The...
Blunting RDP brute-force attacks with rate limiting
Thanks to the Malwarebytes Threat Intelligence Team for the information they provided for this article. Not long ago, guessing a...
HBO sued for sharing subscriber data with Facebook
HBO Max subscribers Angel McDaniel and Constance Simon filed a class-action lawsuit against HBO on Tuesday, alleging that the company...
Anonymous hacked Roskomnadzor agency revealing Russian disinformation
The Anonymous collective continues to launch attacks against Russian entities, this is a summary of recent offensives. Anonymous announced to...
Linux “Dirty Pipe” vulnerability gives unprivileged users root access
A vulnerability in the Linux kernel, nicknamed “Dirty Pipe”, allows an unprivileged user to overwrite data in read-only files. This...
