New Chaos Malware Variant Ditches Wiper for Encryption
The Chaos malware-builder, which climbed up as a wiper from the underground murk nearly a year ago, has shape-shifted with a rebranded binary dubbed Yashma that incorporates fully fledged...
Third-Party Scripts on Websites Present a ‘Broad & Open’ Attack Vector
Many organizations may be significantly more vulnerable to risks from third-party JavaScript in their websites than they think.
New analysis from Source Defense finds there to be a high prevalence of...
VMware, Airline Targeted as Ransomware Chaos Reigns
Ransomware incidents are on the rise and this week proved no exception, with the discovery of a Linux-based ransomware family called Cheerscrypt targeting VMware ESXi servers and an attack...
Interpol’s Massive ‘Operation Delilah’ Nabs BEC Bigwig
Business email compromise (BEC) attacks have caused billions of dollars in losses to businesses globally in recent years — but now international law-enforcement has notched up another victory in...
FBI asks for more than $100M in cyber and data-related increases for 2023
Written by AJ Vicens May 25, 2022 |...
Verizon Report: Ransomware, Human Error Among Top Security Risks
2022’s DBIR also highlighted the far-reaching impact of supply-chain breaches and how organizations and their employees are the reasons why incidents occur.
Ransomware, supply-chain threats and how organizations and their...
How Secrets Lurking in Source Code Lead to Major Breaches
By: The Hacker News
If one word could sum up the 2021 infosecurity year (well, actually three), it would be these: "supply chain attack".
A software supply chain attack happens...
Eerie GoodWill ransomware forces victims to publish videos of good deeds on social media
GoodWill ransomware has victims do something other than pay a ransom to recover their files.
Ransomware does what the name implies: holds your files or network to ransom. Pay...
Zoom Patches ‘Zero-Click’ RCE Bug
The Google Project Zero researcher found a bug in XML parsing on the Zoom client and server.
Zoom patched a medium-severity flaw, advising Windows, macOS, iOS and Android users to...
DDoS Extortion Attack Flagged as Possible REvil Resurgence
Concern has been raised that a coordinated distributed denial-of-service (DDoS) attack from a malicious actor could be associated with the notorious ransomware-as-a-service (RaaS) group REvil.
According to a report from...
