The cyber threat landscape is becoming more complex by the day. Attackers are constantly scanning networks for vulnerable applications, programs, cloud instances, and the latest flavor of the month is APIs, widely considered an easy …
Incentivizing Developers is the Key to Better Security Practices Read More »
The US Department of Justice charged the admin of the WireX Android botnet for targeting an American multinational hotel chain in a distributed denial-of-service (DDoS) attack. Izzet Mert Ozek, the defendant, used the botnet which …
WireX DDoS botnet admin charged for attacking hotel chain Read More »
Cybersecurity firm Profero has discovered that the RansomExx gang does not correctly lock Linux files during encryption, leading to potentially corrupted files. In a new report by Profero, Senior Incident Responder Brenton Morris says the …
RansomEXX ransomware Linux encryptor may damage victims’ files Read More »
The House Committee on Oversight and Reform has requested a briefing to understand the rationale behind the FBI’s decision to delay providing the victims of the Kaseya REvil ransomware with a universal decryption key for …
US Congress asks FBI to explain delay in helping Kaseya atack victims Read More »
Cyber criminals using a ransomware-as-a-service scheme have been spotted complaining that the group they rent the malware from could be using a hidden backdoor to grab ransom payments for themselves. REvil is one of the most …
Commercially developed FinFisher surveillanceware has been upgraded to infect Windows devices using a UEFI (Unified Extensible Firmware Interface) bootkit that leverages a trojanized Windows Boot Manager, marking a shift in infection vectors that allow it …
New FinSpy Malware Variant Infects Windows Systems With UEFI Bootkit Read More »
Two newly discovered malicious Android applications on Google Play Store have been used to target users of Brazil’s instant payment ecosystem in a likely attempt to lure victims into fraudulently transferring their entire account balances …
Hackers Targeting Brazil’s PIX Payment System to Drain Users’ Bank Accounts Read More »
Academic researchers have found a way to make fraudulent payments using Apple Pay from a locked iPhone with a Visa card in the digital wallet with express mode enabled. The method is akin to a …
Apple Pay with VISA lets hackers force payments on locked iPhones Read More »
Facebook today open-sourced a static analysis tool its software and security engineers use internally to find potentially dangerous security and privacy flaws in the company’s Android and Java applications. This security-focused tool, dubbed Mariana Trench (MT), can analyze large codebases of …
Facebook open-sources tool to find Android app security flaws Read More »
Russian law enforcement on Tuesday has arrested Ilya Sachkov, the co-founder and CEO of cybersecurity company Group-IB, on suspicion of high treason resulting from sharing data with foreign intelligence. While details about the accusations have yet to …
Russia arrests cybersecurity firm CEO after raiding offices Read More »
A working exploit for CVE-2021-22005 — a vulnerability with VMware vCenter — has been released and is reportedly being used by threat actors, according to experts tracking the issue. Last week, VMware warned of a …
Exploit released for VMware vulnerability after CISA warning Read More »
Commercially developed FinFisher malware now can infect Windows devices using a UEFI bootkit that it injects in the Windows Boot Manager. FinFisher (also known as FinSpy and Wingbird) is a surveillance solution developed by Gamma Group that …
FinFisher malware hijacks Windows Boot Manager with UEFI bootkit Read More »