Apache Issues 3rd Patch to Fix New High-Severity Log4j Vulnerability
By: Ravie Lakshmanan
The issues with Log4j continued to stack up as the Apache Software Foundation (ASF) on Friday rolled out yet another patch — version 2.17.0 — for the...
New PseudoManuscrypt Malware Infected Over 35,000 Computers in 2021
By: Ravie Lakshmanan
Industrial and government organizations, including enterprises in the military-industrial complex and research laboratories, are the targets of a new malware botnet dubbed PseudoManyscrypt that has infected roughly...
Hackers Using Malicious IIS Server Module to Steal Microsoft Exchange Credentials
By: Ravie Lakshmanan
Malicious actors are deploying a previously undiscovered binary, an Internet Information Services (IIS) webserver module dubbed "Owowa," on Microsoft Exchange Outlook Web Access servers with the goal...
Ransomware Affiliate Arrested in Romania; 51 Stolen Data Brokers Arrested in Ukraine
By: Ravie Lakshmanan
Europol, the European Union's premier law enforcement agency, has announced the arrest of a third Romanian national for his role as a ransomware affiliate suspected of hacking...
How Extended Security Posture Management Optimizes Your Security Stack
By: The Hacker News
As a CISO, one of the most challenging questions to answer is "How well are we protected right now?" Between the acceleration of hackers' offensive capabilities...
Apache Log4j Vulnerability — Log4Shell — Widely Under Active Attack
By: Ravie Lakshmanan
Threat actors are actively weaponizing unpatched servers affected by the newly identified "Log4Shell" vulnerability in Log4j to install cryptocurrency miners, Cobalt Strike, and recruit the devices into...
Microsoft Details Building Blocks of Widely Active Qakbot Banking Trojan
By: Ravie Lakshmanan
Infection chains associated with the multi-purpose Qakbot malware have been broken down into "distinct building blocks," an effort that Microsoft said will help to proactively detect and...
1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses
By: Ravie Lakshmanan
As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins...
Why Holidays Put Your Company at Risk of Cyber Attack (And How to Take...
By: The Hacker News
It is a time when many are thinking of their families and loved ones, time off work, and gift-giving – the holidays. However, while many have...
Microsoft Seizes 42 Malicious Web Domains Used By Chinese Hackers
By: Ravie Lakshmanan
Microsoft on Monday announced the seizure of 42 domains used by a China-based cyber espionage group that set its sights on organizations in the U.S. and 28...
