Take ‘Urgent’ Steps to Secure Systems From Damaging Attacks, CISA Says
The US Department of Homeland Security's Cybersecurity & Infrastructure Security Agency (CISA) today published a bulletin for senior leaders of US organizations to "immediately implement" a list of specific...
Researchers Explore Hacking VirusTotal to Find Stolen Credentials
Security researchers have found a method to collect vast amounts of stolen user credentials by executing searches on VirusTotal, the online service used to analyze suspicious files and URLs.
With...
Microsoft Details Recent Damaging Malware Attacks on Ukrainian Organizations
Multiple organizations in Ukraine were hit last week in a destructive, likely nation-state-backed malware operation designed to render targeted systems completely inoperable.
The two-stage malware looks like ransomware on the...
‘White Rabbit’ Ransomware May Be FIN8’s Latest Tool
It’s a double-extortion play that uses the command-line password ‘KissMe’ to hide its nasty acts and adorns its ransom note with cutesy ASCII bunny art.
A new ransomware family, White...
The Log4j Vulnerability Puts Pressure on the Security World
It’s time to sound the alarm for Log4Shell. Saryu Nayyar, CEO at Gurucul, discusses what actions you should be taking.
It’s not my intention to be alarmist about the Log4j...
Name That Toon: Nowhere to Hide
Who says you can't teach an old snowman new tricks? Now we need the perfect caption for the above cartoon. And for that we turn to you, Dark Reading...
US Search for Vulnerabilities Drives 10x Increase in Bug Reports
A September 2020 directive to US government agencies to create vulnerability disclosure policies has driven a surge in bug-reporting activities: The federal sector saw a 1,000% increase in valid...
Europol Shuts Down Popular Cybercriminal VPN Service
Law enforcement authorities have acted against the criminal use of VPN services with the shutdown of VPNLab.net, which was used to support ransomware attacks and other crimes.
The disruption took...
Organizations Face a ‘Losing Battle’ Against Vulnerabilities
Companies must take more ‘innovative and proactive’ approaches to security in 2022 to combat threats that emerged last year, researchers said.
After a banner year for vulnerabilities and cyberattacks in...
Critical ManageEngine Desktop Server Bug Opens Orgs to Malware
Zoho’s comprehensive endpoint-management platform suffers from an authentication-bypass bug (CVE-2021-44757) that could lead to remote code execution.
A critical security vulnerability in the Zoho ManageEngine Desktop Central and Desktop Central...
