An espionage-focused threat actor known for targeting China, Pakistan, and Saudi Arabia has expanded to set its sights on Bangladeshi government organizations as part of …
Researchers Warn of Nerbian RAT Targeting Entities in Italy, Spain, and the U.K
A previously undocumented remote access trojan (RAT) written in the Go programming language has been spotted disproportionately targeting entities in Italy, Spain, and the U.K. …
Malicious NPM Packages Target German Companies in Supply Chain Attack
Cybersecurity researchers have discovered a number of malicious packages in the NPM registry specifically targeting a number of prominent companies based in Germany to carry …
E.U. Blames Russia for Cyberattack on KA-SAT Satellite Network Operated by Viasat
The Five Eyes nations comprising Australia[1], Canada[2], New Zealand[3], the U.K.[4], and the U.S.[5], along with Ukraine and the European Union, formally pinned Russia for …
Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates
Microsoft on Tuesday rolled out fixes for as many as 74 security vulnerabilities[1], including one for a zero-day bug that’s being actively exploited in the …
What is detection-as-code?
TL;DR: Adopt a modern, test-driven methodology for securing your organization with Detection-as-Code. Over the past decade, threat detection has become business-critical and even more complicated. …
New REvil Samples Indicate Ransomware Gang is Back After Months of Inactivity
The notorious ransomware operation known as REvil (aka Sodin or Sodinokibi) has resumed after six months of inactivity, an analysis of new ransomware samples has …
Experts Detail Saintstealer and Prynt Stealer Info-Stealing Malware Families
Cybersecurity researchers have dissected the inner workings of an information-stealing malware called Saintstealer that’s designed to siphon credentials and system information. “After execution, the stealer …
Microsoft Mitigates RCE Vulnerability Affecting Azure Synapse and Data Factory
Microsoft on Monday disclosed that it mitigated a security flaw affecting Azure Synapse and Azure Data Factory that, if successfully exploited, could result in remote …
U.S. Proposes $1 Million Fine on Colonial Pipeline for Safety Violations After Cyberattack
The U.S. Department of Transportation’s Pipeline and Hazardous Materials Safety Administration (PHMSA) has proposed a penalty of nearly $1 million to Colonial Pipeline for violating …
