A New SolarWinds Flaw Likely Had Let Hackers Install SUPERNOVA Malware
By: Ravie Lakshmanan
An authentication bypass vulnerability in the SolarWinds Orion software may have been leveraged by adversaries as zero-day to deploy the SUPERNOVA malware in target environments.
According to an...
Police Arrest 21 WeLeakInfo Customers Who Bought Breached Personal Data
By: Ravie Lakshmanan
21 people have been arrested across the UK as part of a nationwide cyber crackdown targeting customers of WeLeakInfocom, a now-defunct online service that had been previously...
Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks
By: Ravie Lakshmanan
Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller (ADC) devices that attackers are abusing to launch...
Microsoft Warns CrowdStrike of Hackers Targeting Azure Cloud Customers
By: Ravie Lakshmanan
New evidence amidst the ongoing probe into the espionage campaign targeting SolarWinds has uncovered an unsuccessful attempt to compromise cybersecurity firm Crowdstrike and access the company's email.
The...
A Second Hacker Group May Have Also Breached SolarWinds, Microsoft Says
By: Ravie Lakshmanan
As the probe into the SolarWinds supply chain attack continues, new digital forensic evidence has brought to light that a separate threat actor may have been abusing...
US insurance company has customer data leaked on forum
We recently discovered a 500GB database purportedly belonging to USG Insurance Services being leaked online for free on a popular Russian hacking forum. The cybercriminal leaking the data claims...
Microsoft Says Its Systems Were Also Breached in Massive SolarWinds Hack
By: Ravie Lakshmanan
The massive state-sponsored espionage campaign that compromised software maker SolarWinds also targeted Microsoft, as the unfolding investigation into the hacking spree reveals the incident may have been...
Software Supply-Chain Attack Hits Vietnam Government Certification Authority
By: Ravie Lakshmanan
Cybersecurity researchers today disclosed a new supply-chain attack targeting the Vietnam Government Certification Authority (VGCA) that compromised the agency's digital signature toolkit to install a backdoor on...
New Evidence Suggests SolarWinds’ Codebase Was Hacked to Inject Backdoor
By: Ravie Lakshmanan
The investigation into how the attackers managed to compromise SolarWinds' internal network and poison the company's software updates is still underway, but we may be one step...
Exfiltrating Data from Air-Gapped Computers via Wi-Fi Signals (Without Wi-Fi Hardware)
By: Ravie Lakshmanan
A security researcher has demonstrated that sensitive data could be exfiltrated from air-gapped computers via a novel technique that leverages Wi-Fi signals as a covert channel—surprisingly, without...
