Hunting for possible explanations
In last year’s edition of the Security Navigator we noted that the Manufacturing Industry appeared to be totally over-represented in our dataset of Cyber Extortion victims. Neither the number of…
Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency
Mar 16, 2023Ravie LakshmananCyber Attack / Vulnerability Multiple threat actors, including a nation-state group, exploited a critical three-year-old security flaw in Progress Telerik to break into an unnamed federal entity…
CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild
Mar 16, 2023Ravie LakshmananZero-Day / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on March 15 added a security vulnerability impacting Adobe ColdFusion to its Known Exploited Vulnerabilities (KEV)…
YoroTrooper Stealing Credentials and Information from Government and Energy Organizations
Mar 15, 2023Ravie LakshmananCyber Espionage / Data Security A previously undocumented threat actor dubbed YoroTrooper has been targeting government, energy, and international organizations across Europe as part of a cyber…
New Cryptojacking Operation Targeting Kubernetes Clusters for Dero Mining
Mar 15, 2023Ravie LakshmananServer Security / Cryptocurrency Cybersecurity researchers have discovered the first-ever illicit cryptocurrency mining campaign used to mint Dero since the start of February 2023. “The novel Dero…
The Different Methods and Stages of Penetration Testing
Mar 15, 2023The Hacker NewsPenetration Testing / Cyber Security The stakes could not be higher for cyber defenders. With the vast amounts of sensitive information, intellectual property, and financial data…
Tick APT Targeted High-Value Customers of East Asian Data-Loss Prevention Company
Mar 15, 2023Ravie LakshmananCyber Attack / Data Safety A cyberespionage actor known as Tick has been attributed with high confidence to a compromise of an East Asian data-loss prevention (DLP)…
Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack
Mar 15, 2023Ravie LakshmananPatch Tuesday / Software Update Microsoft’s Patch Tuesday update for March 2023 is rolling out with remediations for a set of 80 security flaws, two of which…
GoBruteforcer: New Golang-Based Malware Breaches Web Servers Via Brute-Force Attacks
Mar 14, 2023Ravie LakshmananNetwork Security / Botnet A new Golang-based malware dubbed GoBruteforcer has been found targeting web servers running phpMyAdmin, MySQL, FTP, and Postgres to corral the devices into…
The Prolificacy of LockBit Ransomware
Today, the LockBit ransomware is the most active and successful cybercrime organization in the world. Attributed to a Russian Threat Actor, LockBit has stepped out from the shadows of the…
