FBI warns of patched Barracuda ESG appliances still being hacked
The Federal Bureau of Investigation warned that patches for a critical Barracuda Email Security Gateway (ESG) remote command injection flaw...
News
Ransomware hackers dwell time drops to 5 days, RDP still widely used
Ransomware threat actors are spending less time on compromised networks before security solutions sound the alarm. In the first half of...
New Whiffy Recon malware uses WiFi to triangulate your location
Cybercriminals behind the Smoke Loader botnet are using a new piece of malware called Whiffy Recon to triangulate the location...
Attack Dwell Times Fall but Threat Actors Are Moving Faster
The dwell time of cyber-attacks fell to a median of eight days in the first half of 2023, but attackers...
Sensitive Data of 10 Million at Risk After French Employment Agency Breach
The French national employment agency, Pôle emploi, has been hit by a cyber-attack potentially exposing critical information of up to...
Sextortion Scams Surge 178% in a Year
Security researchers have detected a 178% increase in sextortion emails between the first half of 2022 and the same period...
St Helens Council Warns of Phishing After Ransomware Breach
A UK local authority has warned citizens to watch out for follow-on scams after it was breached in a ransomware...
Teens Found Responsible For Lapsus$ Cyber-Attacks
An Oxford teenager has been found responsible for a series of hacking incidents impacting big-name brands, as part of the...
Data of 2.6 Million Duolingo Users Leaked on Hacking Forum
Data from 2.6 million users of Duolingo, a language learning platform with over 74 million monthly users, has been leaked...
NIST Publishes Draft Post-Quantum Cryptography Standards
Draft post-quantum cryptography (PQC) standards have been published by the US National Institute of Standards and Technology (NIST). The new...
FBI Flags $40M Crypto Cash-Out Plot By North Korean Hackers
The Federal Bureau of Investigation (FBI) has issued a stark warning to cryptocurrency firms regarding a surge in blockchain activity...
New Study Sheds Light on Adhubllka Ransomware Network
Cybersecurity researchers have unveiled a complex web of interconnected ransomware strains that trace their origins back to a common source:...
US-CERT Vulnerability Summary for the Week of August 14, 2023
High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch Infofoldingathome -- client_advanced_controlAn issue was discovered in FoldingAtHome Client Advanced Control GUI...
DarkGate reloaded via malvertising and SEO poisoning campaigns
In July 2023, we observed a malvertising campaign that lured potential victims to a fraudulent site for a Windows IT management...
WinRAR zero-day exploited since April to hack trading accounts
A WinRar zero-day vulnerability tracked as CVE-2023-38831 was actively exploited to install malware when clicking on harmless files in an...
The MOVEit hack and what it taught us about application security
When a cyberattack like the 2023 MOVEit hack makes global news headlines, attention often focuses on the names of the...
US charges founders of Tornado Cash mixer used by Lazarus hackers
The U.S. Justice Department charged two Tornado Cash founders with helping criminals, including the notorious North Korean Lazarus hacking group,...
Kali Linux 2023.3 released with 9 new tools, internal changes
Kali Linux 2023.3, the third version of 2023, is now available for download, with nine new tools and internal optimizations....
FBI: Lazarus hackers readying to cash out $41 million in stolen crypto
The FBI warned that North Koreans are likely readying to cash out tens of millions worth of stolen cryptocurrency out...
Hosting firm says it lost all customer data after ransomware attack
Danish hosting firms CloudNordic and AzeroCloud have suffered ransomware attacks, causing the loss of the majority of customer data and...
Bitwarden releases free and open-source E2EE Secrets Manager
Bitwarden, the maker of the popular open-source password manager tool, has released ‘Secrets Manager,’ an end-to-end encrypted secrets manager for...
Lapsus$ teen hackers convicted of high-profile cyberattacks
A London jury has found that an 18-year-old member of the Lapsus$ data extortion gang helped hack multiple high-profile companies, stole...
New stealthy techniques let hackers gain Windows SYSTEM privileges
Security researchers have released NoFilter, a tool that abuses the Windows Filtering Platform to elevate a user's privileges to increases...
Discord starts notifying users affected by March data breach
Starting on Monday, Discord has been reaching out to users affected by a data breach disclosed earlier this year to...
