At least six different Russia-aligned actors launched no less than 237 cyberattacks against Ukraine from February 23 to April 8, including 38 discrete destructive attacks that irrevocably destroyed files in hundreds of systems across dozens …
Microsoft Documents Over 200 Cyberattacks by Russia Against Ukraine Read More »
A Chinese-speaking advanced persistent threat (APT) has been linked to a new campaign targeting gambling-related companies in South East Asia, particularly Taiwan, the Philippines, and Hong Kong. Cybersecurity firm Avast dubbed the campaign Operation Dragon …
Chinese APT Hackers Targeting Betting Companies in Southeast Asia Read More »
A new large scale supply chain attack has been observed targeting Azure developers with no less than 218 malicious NPM packages with the goal of stealing personal identifiable information. “After manually inspecting some of these …
Over 200 Malicious NPM Packages Caught Targeting Azure Developers Read More »
A China-based advanced persistent threat (APT) known as Mustang Panda has been linked to an ongoing cyberespionage campaign using a previously undocumented variant of the PlugX remote access trojan on infected machines. Slovak cybersecurity firm …
Chinese ‘Mustang Panda’ Hackers Spotted Deploying New ‘Hodur’ Malware Read More »
The notorious Lazarus Group actor has been observed mounting a new campaign that makes use of the Windows Update service to execute its malicious payload, expanding the arsenal of living-off-the-land (LotL) techniques leveraged by the …
North Korean Hackers Using Windows Update Service to Infect PCs with Malware Read More »
UniCC, the biggest dark web marketplace of stolen credit and debit cards, has announced that it’s shuttering its operations after earning $358 million in purchases since 2013 using cryptocurrencies such as Bitcoin, Litecoin, Ether, and …
Dark Web’s Largest Marketplace for Stolen Credit Cards is Shutting Down Read More »
Researchers have disclosed a security shortcoming affecting three different WordPress plugins that impact over 84,000 websites and could be abused by a malicious actor to take over vulnerable sites. This flaw made it possible for …
High-Severity Vulnerability in 3 WordPress Plugins Affected 84,000 Websites Read More »
The government of Ukraine on Sunday formally accused Russia of masterminding the attacks that targeted websites of public institutions and government agencies this past week. All the evidence points to the fact that Russia is …
Ukrainian Government Officially Accuses Russia of Recent Cyberattacks Read More »
A new cross-platform backdoor called “SysJoker” has been observed targeting machines running Windows, Linux, and macOS operating systems as part of an ongoing espionage campaign that’s believed to have been initiated during the second half …
New SysJoker Espionage Malware Targeting Windows, macOS, and Linux Users Read More »
Amid renewed tensions between the U.S. and Russia over Ukraine and Kazakhstan, American cybersecurity and intelligence agencies on Tuesday released a joint advisory on how to detect, respond to, and mitigate cyberattacks orchestrated by Russian …
FBI, NSA and CISA Warns of Russian Hackers Targeting Critical Infrastructure Read More »
The European Union’s data protection watchdog on Monday ordered Europol to delete a vast trove of personal data it obtained pertaining to individuals with no proven links to criminal activity. Datasets older than six months …
Europol Ordered to Delete Data of Individuals With No Proven Links to Crimes Read More »
Meta Platforms, the company formerly known as Facebook, on Friday announced the launch of a centralized Privacy Center that aims to “educate people” about its approach with regards to how it collects and processes personal …