US law to compel firms to report cyber attacks
The Senate has approved a bill that, if passed, would require vital infrastructure companies to report a cyber attack no more than three days after learning of it. Similarly,...
RagnarLocker ransomware gang breached 52 critical infrastructure organizations
The FBI says it has identified at least 52 entities across 10 critical infrastructure sectors affected by RagnarLocker ransomware.
In a FLASH publication issued by the FBI in coordination...
FinCEN warns ransomware proceeds could be part of Russia sanctions evasion
Written by Joe Warminsky Mar 8, 2022 |...
NVIDIA’s Stolen Code-Signing Certs Used to Sign Malware
NVIDIA certificates are being used to sign malware, enabling malicious programs to pose as legitimate and slide past security safeguards on Windows machines.
Two of NVIDIA’s code-signing certificates were part...
Medical and IoT Devices From More Than 100 Vendors Vulnerable to Attack
More than 150 Internet of Things (IoT) devices — including many that are used in the healthcare sector — from over 100 companies are at heightened risk of attack...
Google: Russian Hackers Target Ukrainians, European Allies via Phishing Attacks
By: Ravie Lakshmanan
A broad range of threat actors, including Fancy Bear, Ghostwriter, and Mustang Panda, have launched phishing campaigns against Ukraine, Poland, and other European entities amid Russia's invasion...
Zero-Click Flaws in Widely Used UPS Devices Threaten Critical Infratructure
The ‘TLStorm’ vulnerabilities, found in APC Smart-UPS products, could allow attackers to cause both cyber and physical damage by taking down critical infrastructure.
Three critical security vulnerabilities in widely used...
