Kaseya received a universal decryptor that allows victims of the July 2nd REvil ransomware attack to recover their files for free. On July 2nd, the REvil ransomware operation launched a massive attack by exploiting a …
Kaseya obtains universal decryptor for REvil ransomware victims Read More »
Today, the French national cyber-security agency warned of an ongoing series of attacks against a large number of French organizations coordinated by the Chinese-backed APT31 hacking group. It appears from our investigations that the threat …
France warns of APT31 cyberspies targeting French organizations Read More »
Chinese state-sponsored attackers have breached 13 US oil and natural gas (ONG) pipeline companies between December 2011 to 2013 following a spear-phishing campaign targeting their employees. The end goal of the attacks was to help …
Chinese state hackers breached over a dozen US pipeline operators Read More »
DuckDuckGo is rolling out an email privacy feature that strips incoming messages of trackers that can help profile you for better profiling and ad targeting. Users of the service get a free “@duck.com” email address …
DuckDuckGo’s new email privacy service forwards tracker-free messages Read More »
Unprivileged attackers can gain root privileges by exploiting a local privilege escalation (LPE) vulnerability in default configurations of the Linux Kernel’s filesystem layer on vulnerable devices. As discovered by Qualys researchers, the LPE security flaw …
New Linux kernel bug lets you get root on most modern distros Read More »
Attackers have stolen 1 TB of proprietary data belonging to Saudi Aramco and are offering it for sale on the darknet. The Saudi Arabian Oil Company, better known as Saudi Aramco, is one of the largest public petroleum and …
Saudi Aramco data breach sees 1 TB stolen data for sale Read More »
US and allies, including the European Union, the United Kingdom, and NATO, are officially blaming China for this year’s widespread Microsoft Exchange hacking campaign. These early 2021 cyberattacks targeted over a quarter of a million …
US and allies officially accuse China of Microsoft Exchange attacks Read More »
Microsoft’s Digital Crimes Unit (DCU) has seized 17 malicious domains used by scammers in a business email compromise (BEC) campaign targeting the company’s customers. The domains taken down by Microsoft were so-called “homoglyph” domains registered to resemble those …
Microsoft takes down domains used to scam Office 365 users Read More »
CISA warns of threat actors targeting “a known, previously patched, vulnerability” found in SonicWall Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) products with end-of-life firmware. As the US federal agency also adds, …
HelloKitty ransomware is targeting vulnerable SonicWall devices Read More »
Moldova’s “Court of Accounts” has suffered a cyberattack leading to the agency’s public databases and audits being destroyed. Court of Accounts of Moldova is a government authority that performs audits of public financial resources and …
Cyberattack on Moldova’s Court of Accounts destroyed public audits Read More »
D-Link has issued a firmware hotfix to address multiple vulnerabilities in the DIR-3040 AC3000-based wireless internet router. Following successful exploitation, they can let attackers execute arbitrary code on unpatched routers, gain access to sensitive information …
D-Link issues hotfix for hard-coded password router vulnerabilities Read More »
Microsoft and Citizen Lab have linked Israeli spyware company Candiru (also tracked as Sourgum) to new Windows spyware dubbed DevilsTongue deployed using now patched Windows zero-day vulnerabilities. Candiru is a secretive Israel-based company that sells …
Microsoft: Israeli firm used Windows zero-days to deploy spyware Read More »