Attackers Can Weaponize Firewalls and Middleboxes for Amplified DDoS Attacks
By: Ravie Lakshmanan
Weaknesses in the implementation of TCP protocol in middleboxes and censorship infrastructure could be weaponized as a vector to stage reflected denial of service (DoS) amplification attacks,...
‘DeadRinger’ Targeted Exchange Servers Long Before Discovery
Cyberespionage campaigns linked to China attacked telecoms via ProxyLogon bugs, stealing call records and maintaining persistence, as far back as 2017.
Threat actors linked to China exploited the notorious Microsoft...
CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanel
Dec 05, 2024Ravie LakshmananVulnerability / Threat Intelligence
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added multiple security flaws affecting products from Zyxel, North Grid Proself, ProjectSend, and CyberPanel to...
DOJ drops Trump-era ‘China Initiative’ but remains focused on nation-state threats
Written by AJ Vicens Feb 23, 2022 |...
Ransomware attack hits German pharmaceutical wholesaler, disrupts medicine supplies
AEP, a German pharmaceutical wholesaler based in Bavaria, said it was hit by a ransomware attack that could disrupt the supply of medicine to thousands of pharmacies. ...
As backlash mounts, data privacy bill markup is canceled moments before it was to...
The House Energy and Commerce Committee canceled a hearing to mark up a controversial federal data privacy bill moments before it was to start on Thursday morning. ...
Russian APTs Furiously Phish Ukraine – Google
Also on the rise: DDoS attacks against Ukrainian sites and phishing activity capitalizing on the conflict, with China’s Mustang Panda targeting Europe.
While Russia is fighting a physical war on...
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial access method.
The use of ClickFix, where users are tricked...
Ohio’s capital says July ransomware attack leaked info of 500,000
A ransomware attack on the city of Columbus, Ohio that stirred up a high-profile lawsuit this summer exposed the information of more than 500,000 current and former residents,...
