DEV-0569 Ransomware Group Remarkably Innovative, Microsoft Cautions
It generally starts with malvertising and ends with the deployment of Royal ransomware, but a new threat group has distinguished itself by its ability to innovate the malicious steps...
White House expected to issue executive order reining in spyware
Written by Tonya Riley Nov 18, 2022 |...
Hive Ransomware Attackers Extorted $100 Million from Over 1,300 Companies Worldwide
By: Ravie Lakshmanan
The threat actors behind the Hive ransomware-as-a-service (RaaS) scheme have launched attacks against over 1,300 companies across the world, netting the gang $100 million in illicit payments...
North Korean Hackers Targeting Europe and Latin America with Updated DTrack Backdoor
By: Ravie Lakshmanan
Hackers tied to the North Korean government have been observed using an updated version of a backdoor known as Dtrack targeting a wide range of industries in...
Instagram Impersonators Target Thousands, Slipping by Microsoft’s Cybersecurity
Cyberattackers have targeted students at national educational institutions in the US with a sophisticated phishing campaign that impersonated Instagram. The unusual aspect of the gambit is that they used a...
Sam Bankman-Fried says he regrets filing for bankruptcy: Report
The former CEO of FTX Sam Bankman-Fried has expressed deep regret over filing for Chapter 11 bankruptcy last week, calling it his “biggest single fuckup.” In a wide-ranging interview with...
Technical Advisory – NXP i.MX SDP_READ_DISABLE Fuse Bypass (CVE-2022-45163)
Vendor: NXP Semiconductors
Vendor URL: https://www.nxp.com
Affected Devices: i.MX RT 101x, i.MX RT102x, i.MX RT1050/6x, i.MX 6 Family, i.MX 7 Family, i.MX8M Quad/Mini, Vybrid
Author: Jon Szymaniak
CVE: CVE-2022-45163
Advisory URL: https://community.nxp.com/t5/Known-Limitations-and-Guidelines/SDP-Read-Bypass-CVE-2022-45163/ta-p/1553565
Risk: 5.3...
MITRE Engenuity Launches Evaluations for Security Service Providers
A new set of evaluations for managed security service providers that MITRE Engenuity has released can potentially give enterprise decision-makers a handy resource to consult when selecting a provider....
China-Based Billbug APT Infiltrates Certificate Authority
The state-sponsored cyberattack group known as Billbug managed to compromise a digital certificate authority (CA) as part of an wide-ranging espionage campaign that stretched back to March — a...
Iranian hackers use Log4Shell to mine crypto on federal computer system
Written by AJ Vicens Nov 16, 2022 |...
