SideWinder, a prolific nation-state actor mainly known for targeting Pakistan military entities, compromised the official website of the National Electric Power Regulatory Authority (NEPRA) to …
CISA Warns of Daixin Team Hackers Targeting Health Organizations With Ransomware
U.S. cybersecurity and intelligence agencies have published a joint advisory warning of attacks perpetrated by a cybercrime gang known as the Daixin Team primarily targeting …
Why Ransomware in Education on the Rise and What That Means for 2023
The breach of LA Unified School District (LAUSD) highlights the prevalence of password vulnerabilities, as criminal hackers continue to use breached credentials in increasingly frequent …
Critical Flaw Reported in Move Virtual Machine Powering the Aptos Blockchain Network
Researchers have disclosed details about a now-patched critical flaw in the Move virtual machine that powers the Aptos blockchain network. The vulnerability “can cause Aptos …
Emotet Botnet Distributing Self-Unlocking Password-Protected RAR Files to Drop Malware
The notorious Emotet botnet[1] has been linked to a new wave of malspam campaigns that take advantage of password-protected archive files to drop CoinMiner and …
Multiple Campaigns Exploit VMware Vulnerability to Deploy Crypto Miners and Ransomware
A now-patched vulnerability in VMware Workspace ONE Access has been observed being exploited to deliver both cryptocurrency miners and ransomware on affected machines. “The attacker …
Hackers Started Exploiting Critical “Text4Shell” Apache Commons Text Vulnerability
WordPress security company Wordfence on Thursday said it started detecting exploitation attempts targeting the newly disclosed flaw in Apache Commons Text on October 18, 2022. …
A Quick Look at the “Strengthening America’s Cybersecurity” Initiative
Acknowledging that you have a problem is the first step to addressing the problem in a serious way. This seems to be the reasoning for …
Microsoft Confirms Server Misconfiguration Led to 65,000+ Companies’ Data Leak
Microsoft this week confirmed that it inadvertently exposed information related to thousands of customers following a security lapse that left an endpoint publicly accessible over …
Google Launches GUAC Open Source Project to Secure Software Supply Chain
Google on Thursday announced that it’s seeking contributors to a new open source initiative called Graph for Understanding Artifact Composition, also known as GUAC, as …
