Network-attached storage (NAS) appliance maker QNAP on Wednesday said[1] it’s working on updating its QTS and QuTS operating systems after Netatalk last month released patches …
[eBook] Your First 90 Days as MSSP: 10 Steps to Success
Bad actors continuously evolve their tactics and are becoming more sophisticated. Within the past couple of years, we’ve seen supply chain attacks that quickly create …
Chinese Hackers Targeting Russian Military Personnel with Updated PlugX Malware
A China-linked government-sponsored threat actor has been observed targeting Russian speakers with an updated version of a remote access trojan called PlugX[1]. Secureworks attributed the …
Google’s New Safety Section Shows What Data Android Apps Collect About Users
Google on Tuesday officially began rolling out a new “Data safety” section for Android apps on the Play Store to highlight the type of data …
U.S. Offers $10 Million Bounty for Information on 6 Russian Military Hackers
The U.S. government on Tuesday announced[1] up to $10 million in rewards for information on six hackers associated with the Russian military intelligence service. “These …
NPM Bug Allowed Attackers to Distribute Malware as Legitimate Packages
A “logical flaw” has been disclosed in NPM, the default package manager for the Node.js JavaScript runtime environment, that enables malicious actors to pass off …
Microsoft Discovers New Privilege Escalation Flaws in Linux Operating System
Microsoft on Tuesday disclosed a set of two privilege escalation vulnerabilities in the Linux operating system that could potentially allow threat actors to carry out …
Emotet Testing New Delivery Ideas After Microsoft Disables VBA Macros by Default
The threat actor behind the prolific Emotet botnet is testing new attack methods on a small scale before co-opting them into their larger volume malspam …
Gold Ulrick Hackers Still in Action Despite Massive Conti Ransomware Leak
The infamous ransomware group known as Conti has continued[1] its onslaught against entities despite suffering a massive data leak of its own earlier this year, …
North Korean Hackers Target Journalists with GOLDBACKDOOR Malware
A state-backed threat actor with ties to the Democratic People’s Republic of Korea (DRPK) has been attributed to a spear-phishing campaign targeting journalists covering the …
