China-Backed APT10 Supercharges Spy Game With Custom Fileless Backdoor
Chinese-speaking threat actor APT10 has been using a sophisticated and sometimes fileless backdoor to target media, diplomatic, governmental, public sector, and think-tank targets, since at least March, researchers have found.Researchers...
The OSPO – the front line for secure open-source software supply chain governance
Organizations of every shape, size, and sector have embraced open-source software (OSS). The financial, medical, and manufacturing industries – and even national security – now use OSS to power...
Scary stats: $3B stolen in 2022 as of ‘Hacktober,’ doubling 2021
The month of October has broken all records for crypto exploits and the amount of digital loot pilfered — living up to its new moniker of “Hacktober” — according...
White House Convenes International Ransomware Summit
U.S. officials will meet this week with delegations from more than 36 countries to share intelligence and strategize about how to push back against crippling and costly ransomware attacks...
Patch Now: Dangerous RCE Bug Lays Open ConnectWise Server Backup Managers
ConnectWise has patched a critical remote code execution (RCE) vulnerability in its ConnectWise Recover and R1Soft server backup manager technologies that could give attackers a way to compromise thousands...
Fodcha DDoS Botnet Resurfaces with New Capabilities
By: Ravie Lakshmanan
The threat actor behind the Fodcha distributed denial-of-service (DDoS) botnet has resurfaced with new capabilities, researchers reveal.
This includes changes to its communication protocol and the ability to...
Team Finance hacker returns $7M to associated projects after exploit
Four projects have received some $7 million worth of tokens from the hacker behind the $14.5 million Team Finance exploit on Oct. 27. Over the weekend, the attacker confirmed in...
Twilio Reveals Another Breach from the Same Hackers Behind the August Hack
By: Ravie Lakshmanan
Communication services provider Twilio this week disclosed that it experienced another "brief security incident" in June 2022 perpetrated by the same threat actor behind the August hack...
Compound pauses 4 tokens to avoid price manipulation: Finance Redefined
Welcome to Finance Redefined, your weekly dose of essential decentralized finance (DeFi) insights — a newsletter crafted to bring you significant developments over the last week.After the Mango Markets...
Cranefly Cyberspy Group Spawns Unique ISS Technique
Hacking group Cranefly is using the new technique of using Internet Information Services (IIS) commands to deliver backdoors to targets and carry out intelligence-gathering campaigns.Researchers at Symantec have observed...
