REvil Revival: Are Ransomware Gangs Ever Really Gone?
Evidence that members of the defunct REvil group may be reviving the ransomware gang continues to accumulate, but cybersecurity experts question whether the group will have the same impact...
Unpatched DNS-Poisoning Bug Affects Millions of Devices, Stumps Researchers
After months of work by industrial control systems (ICS) cybersecurity teams, a fix for a widespread Domain Name System (DNS) poisoning bug still hasn't been found. Now they're asking for...
SolarWinds Attackers Gear Up for Typosquatting Attacks
A typosquatting campaign intended to abuse popular brands is in the works, likely tied to Nobelium, the notorious Russian-state-backed group behind the SolarWinds attacks.
Recorded Future in its latest research is warning...
AI for Cybersecurity Shimmers With Promise, but Challenges Abound
Companies are quickly adopting cybersecurity products and systems that incorporate artificial intelligence (AI) and machine learning, but the technology comes with significant challenges, and it can't replace human analysts,...
VHD Ransomware Variant Linked to North Korean Cyber Army
The ransomware strain known as VHD has been traced to North Korean state actor APT38 by a team of researchers using detailed code analysis and following a Bitcoin trail.
The Democratic People's Republic...
Microsoft Releases Defender for SMBs
Microsoft has released a stand-alone version of Defender for Business for small-to-midsize businesses (SMBs), which the company says will provide endpoint security on par with that of a large enterprise.
A Microsoft survey found that...
China-Backed Winnti APT Siphons Reams of US Trade Secrets in Sprawling Cyber-Espionage Attack
China's Winnti cyberthreat group has been quietly stealing immense stores of intellectual property and other sensitive data from manufacturing and technology companies in North America and Asia for years.
That's...
Docker Under Siege: Cybercriminals Compromise Honeypots to Ramp Up Attacks
Cybercriminals are ramping up their attacks on the Docker Engine — the software foundation of the container infrastructure used by many cloud-native companies. Researchers flagged a pair of cyber campaigns...
1,000+ Attacks in 2 Years: How the SideWinder APT Sheds Its Skin
It's one of the more prolific yet lesser-known nation-state hacking groups in the world, and it's not out of China or Russia. The so-called SideWinder (aka Rattlesnake or T-APT4)...
FBI: Bank Losses From BEC Attacks Top $43B
Between June 2016 and December 2021, the total losses reported by global financial institutions as a result of business email compromise (BEC) attacks clocked in at more than $43 billion.
The...
