JumpCloud Resets API Keys Amid Ongoing Cybersecurity Incident
By:
Jul 07, 2023Swati KhandelwalSecurity Incident / API Security
JumpCloud, a provider of cloud-based identity and access management solutions, has swiftly reacted to an ongoing cybersecurity incident that impacted some...
Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities
By:
Jul 07, 2023Swati KhandelwalZero-Day Vulnerability
Google has released its monthly security updates for the Android operating system, addressing 46 new software vulnerabilities. Among these, three vulnerabilities have been identified...
BlackByte 2.0 Ransomware: Infiltrate, Encrypt, and Extort in Just 5 Days
By:
Jul 07, 2023Swati KhandelwalEndpoint Security / Ransomware
Ransomware attacks are a major problem for organizations everywhere, and the severity of this problem continues to intensify.
Recently, Microsoft's Incident Response team...
Experts Uncover Year-Long Cyber Attack on IT Firm Utilizing Custom Malware RDStealer
By:
Jun 20, 2023Ravie Lakshmanan
A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang called RDStealer.
"The operation was...
Clop Ransomware Gang Likely Aware of MOVEit Transfer Vulnerability Since 2021
By:
Jun 08, 2023Ravie LakshmananRansomware / Zero-Day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have published a joint advisory regarding the active exploitation...
Cyclops Ransomware Gang Offers Go-Based Info Stealer to Cybercriminals
By:
Jun 06, 2023Ravie LakshmananEndpoint Security / Data Security
Threat actors associated with the Cyclops ransomware have been observed offering an information stealer malware that's designed to capture sensitive data...
Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks
By:
May 31, 2023Ravie LakshmananAdvanced Persistent Threat
The threat actor known as Dark Pink has been linked to five new attacks aimed at various entities in Belgium, Brunei, Indonesia, Thailand,...
Don’t Click That ZIP File! Phishers Weaponizing .ZIP Domains to Trick Victims
By:
A new phishing technique called "file archiver in the browser" can be leveraged to "emulate" a file archiver software in a web browser when a victim visits a...
Escalating China-Taiwan Tensions Fuel Alarming Surge in Cyber Attacks
By:
May 18, 2023Ravie LakshmananCyber War / Threat Intel
The rising geopolitical tensions between China and Taiwan in recent months have sparked a noticeable uptick in cyber attacks on the...
China’s Mustang Panda Hackers Exploit TP-Link Routers for Persistent Attacks
By:
May 16, 2023Ravie LakshmananNetwork Security / Threat Intel
The Chinese nation-state actor known as Mustang Panda has been linked to a new set of sophisticated and targeted attacks aimed...
