North Korean Hackers Stole Millions from Cryptocurrency Startups Worldwide
By: Ravie Lakshmanan
Operators associated with the Lazarus sub-group BlueNoroff have been linked to a series of cyberattacks targeting small and medium-sized companies worldwide with an aim to drain their...
US Cyber Command Links ‘MuddyWater’ Hacking Group to Iranian Intelligence
By: Ravie Lakshmanan
The U.S. Cyber Command (USCYBERCOM) on Wednesday officially confirmed MuddyWater's ties to the Iranian intelligence apparatus, while simultaneously detailing the various tools and tactics adopted by the...
Researchers Decrypted Qakbot Banking Trojan’s Encrypted Registry Keys
By: Ravie Lakshmanan
Cybersecurity researchers have decoded the mechanism by which the versatile Qakbot banking trojan handles the insertion of encrypted configuration data into the Windows Registry.
Qakbot, also known as...
FBI, NSA and CISA Warns of Russian Hackers Targeting Critical Infrastructure
By: Ravie Lakshmanan
Amid renewed tensions between the U.S. and Russia over Ukraine and Kazakhstan, American cybersecurity and intelligence agencies on Tuesday released a joint advisory on how to detect,...
Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities
By: Ravie Lakshmanan
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage of security vulnerabilities uncovered in the Log4j open-source logging framework to deploy...
Chinese APT Hackers Used Log4Shell Exploit to Target Academic Institution
By: Ravie Lakshmanan
A never-before-seen China-based targeted intrusion adversary dubbed Aquatic Panda has been observed leveraging critical flaws in the Apache Log4j logging library as an access vector to perform...
New BLISTER Malware Using Code Signing Certificates to Evade Detection
By: Ravie Lakshmanan
Cybersecurity researchers have disclosed details of an evasive malware campaign that makes use of valid code signing certificates to sneak past security defenses and stay under the...
Experts Discover Backdoor Deployed on the U.S. Federal Agency’s Network
By: Ravie Lakshmanan
A U.S. federal government commission associated with international rights has been targeted by a backdoor that reportedly compromised its internal network in what the researchers described as...
CISA Compliance for 2022
By: The Hacker News
The last several years have seen an ever-increasing number of cyber-attacks, and while the frequency of such attacks has increased, so too has the resulting damage....
Apache Issues 3rd Patch to Fix New High-Severity Log4j Vulnerability
By: Ravie Lakshmanan
The issues with Log4j continued to stack up as the Apache Software Foundation (ASF) on Friday rolled out yet another patch — version 2.17.0 — for the...
