LastPass Hack: Engineer’s Failure to Update Plex Software Led to Massive Data Breach
By:
Mar 07, 2023Ravie LakshmananPassword Security / Software Update
The massive breach at LastPass was the result of one of its engineers failing to update Plex on their home computer,...
Chinese Hackers Targeting European Entities with New MQsTTang Backdoor
By:
Mar 03, 2023Ravie LakshmananThreat Intelligence / Cyber Attack
The China-aligned Mustang Panda actor has been observed using a hitherto unseen custom backdoor called MQsTTang as part of an ongoing...
Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware
By:
Mar 01, 2023Ravie LakshmananThreat Intelligence / Malware
Six different law firms were targeted in January and February 2023 as part of two disparate threat campaigns distributing GootLoader and FakeUpdates...
Dutch Police Arrest 3 Hackers Involved in Massive Data Theft and Extortion Scheme
By:
Feb 27, 2023Ravie Lakshmanan
The Dutch police announced the arrest of three individuals in connection with a "large-scale" criminal operation involving data theft, extortion, and money laundering.
The suspects include...
LastPass Reveals Second Attack Resulting in Breach of Encrypted Password Vaults
By:
Feb 28, 2023Ravie LakshmananPassword Security / Data Breach
LastPass, which in December 2022 disclosed a severe data breach that allowed threat actors to access encrypted password vaults, said it...
CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability
By:
Feb 28, 2023Ravie LakshmananSoftware Security / Cyber Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw affecting the ZK Framework to its Known Exploited...
New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises
By:
Feb 28, 2023Ravie LakshmananRansomware / Malware
A new post-exploitation framework called EXFILTRATOR-22 (aka EX-22) has emerged in the wild with the goal of deploying ransomware within enterprise networks while...
New Threat Actor WIP26 Targeting Telecom Service Providers in the Middle East
By:
Feb 16, 2023Ravie LakshmananCloud Security / Cyber Threat
Telecommunication service providers in the Middle East are being targeted by a previously undocumented threat actor as part of a suspected...
New Mirai Botnet Variant ‘V3G4’ Exploiting 13 Flaws to Target Linux and IoT Devices
By:
Feb 17, 2023Ravie LakshmananIoT Security / Cyber Attack
A new variant of the notorious Mirai botnet has been found leveraging several security vulnerabilities to propagate itself to Linux and...
⚡Top Cybersecurity News Stories This Week — Cybersecurity Newsletter
By:
Hey 👋 there, cyber friends!
Welcome to this week's cybersecurity newsletter, where we aim to keep you informed and empowered in the ever-changing world of cyber threats.
In today's edition,...
