Retail Industry Suffered the most By Ransomware Attacks
The "Sophos state of Ransomware in Retail 2021" report issued by the software and hardware giant Sophos recently, examines the...
News
LockBit Ransomware Blog Offline
BREAKING NEWS: LockBit Ransomware Tor Blog Offline. No further information at present 404-page error on the Ransomware Blog page When...
Fortinet FortiWeb OS Command Injection allows takeover servers remotely
Fortinet addresses a command injection vulnerability that can allow attackers to take complete control of servers running vulnerable FortiWeb WAF...
1.9 million+ records from the FBI’s terrorist watchlist available online
A security researcher discovered that a secret FBI’s terrorist watchlist was accidentally exposed on the internet for three weeks between...
Colonial Pipeline discloses data breach after May ransomware attack
Colonial Pipeline discloses a data breach of the personal information of thousands of individuals after the ransomware attack that took...
T-Mobile confirms data breach that exposed customer personal info
T-Mobile confirms a breach after threat actors claimed to have obtained records of 100 million of its customers and offered...
Recent attacks on Iran were orchestrated by the Indra group
The recent attacks that targeted Iran’s transport ministry and national train system were conducted by a threat actor dubbed Indra. In...
Katie Moussouris hacked Clubhouse. Her emails went unanswered for weeks: Lock and Code S02E15
Nearly one year after the exclusive app Clubhouse launched on the iOS store, its popularity skyrocketed. The app, which is...
How to troubleshoot hardware problems that look like malware problems
Sometimes it’s hard to figure out what exactly is going wrong with your computer. What do you do if you’ve...
A week in security (August 9 – August 15)
Last week on Malwarebytes Labs: Home routers are being hijacked using a vulnerability disclosed just 2 beforeRansomware turncoat leaks Conti...
New AdLoad Malware Circumvents Apple’s XProtect to Infect macOS Devices
As part of multiple campaigns detected by cybersecurity firm SentinelOne, a new AdLoad malware strain is infecting Macs bypassing Apple's...
Critical Flaws Allowing Domain Hijacking Assaults Patched By Node.js Developers
A vulnerability in Node.js that would permit a remote actor to carry out domain hijacking assaults has been patched. Last week,...
Threat Group Aggah Targets Industries Via Spear-Phishing Campaigns
A spear-phishing attack that seems to have commenced in early July 2021, targeting various manufacturing industries in Asia has been...
Hackers can ‘Poison’ Open-source Code on the Internet
A Cornell University Tech team with researchers discovered a new kind of backdoor attack that can modify natural-language modelling systems...
Ficker – An Info-Stealer Malware Being Distributed by Russians
Threat actors are using the Malware-as-a-Service (MaaS) model to attack Windows users, according to researchers. The new info-stealer malware “Ficker”...
US FINRA warns US brokerage firms and brokers of ongoing phishing attacks
The US FINRA warns US brokerage firms and brokers of an ongoing phishing campaign impersonating its representatives to steal sensitive info. The...
Threat actor claims to be selling data of more than 100 million T-Mobile customers
T-Mobile is investigating a possible data breach after a threat actor published a post on a forum claiming to be...
A job ad published by the UK’s Ministry of Defence revealed a secret hacking squad
A job ad published by the UK’s Ministry of Defence has revealed the existence of a previously undisclosed secret SAS...
ESET: 77% of Russian residents believe they are being tracked via their smartphones
According to a survey conducted by ESET, a company specializing in anti-virus software development and protection against cyberthreats, most Russians...
Hackers Publish Classified Documents Stolen from Lithuanian Ministry of Foreign Affairs
The Lithuanian Ministry of Foreign Affairs has refused to comment regarding the credibility of e-mail files allegedly stolen from its...
Supply Chain Attacks Using Container Images
According to cybersecurity firm Aqua Security, a recently discovered crypto mining technique used malicious Docker images to takeover companies' computing...
Researchers Uncovered Russian Spy Agencies Targeting Slovak Government
For months, the Slovak government has been targeted by a cyber-espionage group associated with a Russian intelligence agency, Slovak security...
Microsoft Azure Credentials Exposed in Plaintext by Windows 365
Mimikatz has been used by a vulnerability researcher to dump a user's unencrypted plaintext Microsoft Azure credentials from Microsoft's new...
Security Affairs newsletter Round 327
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free...
