Cybersecurity for Industrial Control Systems: Part 1
In this two-part series, we look into various cybersecurity threats that affected industrial control systems endpoints. We also discuss several...
News
Prominent Carding Marketplace UniCC announced it’s shutting down
One of the biggest underground carding marketplaces, UniCC, announced it’s shutting down its operations. UniCC, one of the biggest underground...
One of the REvil members arrested by FSB was behind Colonial Pipeline attack
A senior Biden administration official said that the one of the Russian hacker arrested by FSB was behind the Colonial...
Threat actors defaced Ukrainian government websites
Threat actors defaced multiple Ukrainian government websites after talks between Ukrainian, US, and Russian officials hit a dead this week. Threat...
Analyzing an Old Bug and Discovering CVE-2021-30995
A vulnerability found in 2021 has been patched and re-patched in the months since it was reported. We analyze the...
Codex Exposed: How Low Is Too Low When We Generate Code?
In a series of blog posts, we explore different aspects of Codex and assess its capabilities with a focus on...
Lorenz ransomware gang stolen files from defense contractor Hensoldt
German multinational defense contractor Hensoldt confirmed to that some of its systems were infected by Lorenz ransomware. Hensoldt, a multinational...
Russian government claims to have dismantled REvil ransomware gang
Russia’s FSB announced to have dismantled the REvil ransomware gang, the infamous group behind Kaseya and JBS USA. The Russian...
North Korea-linked APT BlueNoroff focuses on crypto theft
The North Korea-linked APT group BlueNoroff has been spotted targeting cryptocurrency startups with fake MetaMask browser extensions. The North Korea-linked...
Ukrainian police arrested Ransomware gang behind attacks on 50 companies
Ukrainian police arrested members of a ransomware gang that targeted at least 50 companies in the U.S. and Europe. Ukrainian...
Threat actors can bypass malware detection due to Microsoft Defender weakness
A weakness in the Microsoft Defender antivirus can allow attackers to retrieve information to use to avoid detection. Threat actors...
The BlueNoroff cryptocurrency hunt is still on
BlueNoroff is the name of an APT group coined by Kaspersky researchers while investigating the notorious attack on Bangladesh’s Central...
Cisco fixes a critical flaw in Unified CCMP and Unified CCDM
Cisco fixed a critical privilege escalation vulnerability, tracked as CVE-2022-20658, in Unified CCMP and Unified CCDM. Cisco released security patches...
Ransomware cyberattack forces New Mexico jail to lock down
Five days after the new year, the Metropolitan Detention Center (MDC) in Bernalillo County, New Mexico suddenly went on lockdown....
Some Android users can disable 2G now and why that is a good thing
The Electronic Frontier Foundation (EFF) has happily informed people that Google has quietly pushed a new feature to its Android...
Threat actors abuse public cloud services to spread multiple RATs
Threat actors are actively abusing cloud services from Amazon and Microsoft to deliver RATs such as Nanocore, Netwire, and AsyncRAT. Threat actors are...
Phishers on the prowl with fake parking meter QR codes
QR codes come and go as a threat. The last time we wrote about them they were causing problems at...
Mozilla addresses High-Risk Firefox, Thunderbird vulnerabilities
Mozilla addressed18 security vulnerabilities affecting the popular Firefox web browser and the Thunderbird mail program. Mozilla released Firefox 96 that...
USCYBERCOM: MuddyWater APT is linked to Iran’s MOIS intelligence
US Cyber Command (USCYBERCOM) has officially linked the Iran-linked MuddyWater APT group to Iran’s Ministry of Intelligence and Security (MOIS)....
SysJoker, a previously undetected cross-platform backdoor made the headlines
Security researchers found a new cross-platform backdoor, dubbed SysJoker, the is suspected to be the work of an APT group. Security...
KCodes NetUSB flaw impacts millions of SOHO routers
Cybersecurity experts discovered a flaw in the KCodes NetUSB component that impacts millions of end-user routers from different vendors Cybersecurity...
Russia-linked threat actors targets critical infrastructure, US authorities warn
US authorities warn critical infrastructure operators of the threat of cyberattacks orchestrated by Russia-linked threat actors. US Cybersecurity and Infrastructure...
Update now: Microsoft patches 97 bugs including 6 zero-days and a wormable one
How time flies sometimes. Microsoft yesterday released the first patch Tuesday security updates of the year 2022. The update includes...
Software engineer hacked webcams to spy on girls—Here’s how to protect yourself
A 32 year-old software engineer has been sentenced to two years and two months in prison for remotely accessing chat...
