An ALPHV (BlackCat) representative discusses the group’s plans for a ransomware ‘meta-universe’
Editor’s Note: Late last year, cybersecurity researchers began to notice a ransomware strain called ALPHV that stood out for being particularly sophisticated and coded in the Rust programming language—a...
Charming Kitten Sharpens Its Claws with PowerShell Backdoor
The notorious Iranian APT is fortifying its arsenal with new malicious tools and evasion tactics and may even be behind the Memento ransomware.
The Iranian advanced persistent threat (APT) Charming...
Thousands of Malicious npm Packages Threaten Web Apps
Attackers increasingly are using malicious JavaScript packages to steal data, engage in cryptojacking and unleash botnets, offering a wide supply-chain attack surface for threat actors.
More than 1,300 malicious packages...
Cynet’s Keys to Extend Threat Visibility
By: The Hacker News
We hear about the need for better visibility in the cybersecurity space – detecting threats earlier and more accurately. We often hear about the dwell time...
Tens of Thousands of Websites Vulnerable to RCE Flaw in WordPress Plug-in
Potentially tens — and even hundreds — of thousands of websites powered by WordPress are vulnerable to attack via a remote code execution (RCE) bug in a widely used plug-in called...
New Malware Used by SolarWinds Attackers Went Undetected for Years
By: Ravie Lakshmanan
The threat actor behind the supply chain compromise of SolarWinds has continued to expand its malware arsenal with new tools and techniques that were deployed in attacks...
Supply-Chain Security Is Not a Problem…It’s a Predicament
Despite what security vendors might say, there is no way to comprehensively solve our supply-chain security challenges, posits JupiterOne CISO Sounil Yu. We can only manage them.
In the late...
Lex Fridman targeted in a DeadBolt ransomware attack
The MIT researcher and host of the Lex Fridman podcast claims to have lost 50 terabytes of data due to a ransomware attack.Fridman claims he is one of the...
SolarMarker attackers use SEO poisoning to deliver payload
Threat actors have been observed to use malicious SEO techniques to distribute SolarMarker, information stealer, and backdoor, also known as Jupyter or Polazert.
Over the past seven months, SophosLabs has...
Nord Security and Surfshark merge to create the largest security powerhouse
Two prominent cybersecurity companies, Nord Security and Surfshark, have finalized a merger agreement following months of previous negotiations.
According to the finalized deal, the new company is called Cyberspace and...
