Ransomware Attack Strikes Spain’s Employment Agency
Reports say that the agency in charge of managing Spain’s unemployment benefits has been hit by the Ryuk ransomware.
The Spanish State Employment Service (SEPE) in Spain has been hit...
New steganography attack targets Azerbaijan
A lure document targeting Azerbaijan uses steganography to conceal a remote administration Trojan.
This blog post was authored by Hossein Jazi
Threat actors often vary their techniques to thwart security...
Technical Advisory: Dell SupportAssist Local Privilege Escalation (CVE-2021-21518)
Vendor: Dell / PC-Doctor
Vendor URL: https://www.dell.com/support/contents/en-uk/article/product-support/self-support-knowledgebase/software-and-downloads/supportassist
Versions affected: SupportAssist for Windows version 3.7 or higher, between 2020-08-28 and 2020-10-22
Systems Affected: Windows
Author: richard.warrennccgroupcom
Advisory URL: https://www.dell.com/support/kbdoc/000184012
CVE Identifier: CVE-2021-21518
Risk: CVSSv3.1: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Summary
When running...
FIN8 cybercrime group resurges with improved hacking tool
Written by Shannon Vavra Mar 10, 2021 |...
Verkada surveillance cameras at Tesla, hundreds more businesses breached
A small group of hackers viewed live and archived surveillance footage from hundreds of businesses including Tesla Inc by gaining administrative access to camera maker Verkada over the past...
Russia slows Twitter’s speed over failure to remove banned content
Russia’s state communications watchdog said on Wednesday it was restricting the use of Twitter by slowing down its speed, accusing the social media platform of repeatedly failing to remove...
Cyberattackers Exploiting Critical WordPress Plugin Bug
The security hole in the Plus Addons for Elementor plugin was used in active zero-day attacks prior to a patch being issued.
The Plus Addons for Elementor plugin for WordPress...
Nim-Based Malware Loader Spreads Via Spear-Phishing Emails
Spear-phishing emails are spreading the NimzaLoader malware loader, which some say may be used to download Cobalt Strike.
The TA800 threat group is distributing a malware loader, which researchers call...
SAP Stomps Out Critical RCE Flaw in Manufacturing Software
The remote code execution flaw could allow attackers to deploy malware, modify network configurations and view databases.
Enterprise software giant SAP pushed out fixes for a critical-severity vulnerability in...
Fake Ad Blocker Delivers Hybrid Cryptominer/Ransomware Infection
A hybrid Monero cryptominer and ransomware bug has hit 20,000 machines in 60 days.
At its previous peak in February, the Monero Miner cryptocurrency ransominer was targeting more than 2,500...
