Dec 06, 2022Ravie LakshmananAdvanced Persistent Threat A malicious campaign targeting the Middle East is likely linked to BackdoorDiplomacy, an advanced persistent threat (APT) group with …
Iranian State Hackers Targeting Key Figures in Activism, Journalism, and Politics
Dec 06, 2022Ravie LakshmananPrivacy / Threat Intelligence Hackers with ties to the Iranian government have been linked to an ongoing social engineering and credential phishing …
Darknet’s Largest Mobile Malware Marketplace Threatens Users Worldwide
Dec 06, 2022Ravie LakshmananMobile Malware / Darknet Cybersecurity researchers have shed light on a darknet marketplace called InTheBox that’s designed to specifically cater to mobile …
Understanding NIST CSF to assess your organization’s Ransomware readiness
Ransomware attacks keep increasing in volume and impact largely due to organizations’ weak security controls. Mid-market companies are targeted as they possess a significant amount …
Telcom and BPO Companies Under Attack by SIM Swapping Hackers
Dec 06, 2022Ravie LakshmananSIM Swapping / Network Intrusion A persistent intrusion campaign has set its eyes on telecommunications and business process outsourcing (BPO) companies at …
Open Source Ransomware Toolkit Cryptonite Turns Into Accidental Wiper Malware
Dec 06, 2022Ravie LakshmananEndpoint Security / Data Security A version of an open source ransomware toolkit called Cryptonite has been observed in the wild with …
New BMC Supply Chain Vulnerabilities Affect Servers from Dozens of Manufacturers
Dec 05, 2022Ravie LakshmananServer Security / Cloud Technology Three different security flaws have been disclosed in American Megatrends (AMI) MegaRAC[1] Baseboard Management Controller (BMC) software …
Russian Courts Targeted by New CryWiper Data Wiper Malware Posing as Ransomware
Dec 05, 2022Ravie Lakshmanan A new data wiper malware called CryWiper has been found targeting Russian government agencies, including mayor’s offices and courts. “Although it …
When Being Attractive Gets Risky – How Does Your Attack Surface Look to an Attacker?
In the era of digitization and ever-changing business needs, the production environment has become a living organism. Multiple functions and teams within an organization can …
SiriusXM Vulnerability Lets Hackers Remotely Unlock and Start Connected Cars
Dec 05, 2022Ravie LakshmananVehicle Security / Internet of Things Cybersecurity researchers have discovered a security vulnerability that exposes cars from Honda, Nissan, Infiniti, and Acura …