Cybersecurity in 2021: Stopping the madness
Marc Andreessen had it right – software has eaten the world. As a result, the world can be hacked.Just look at the past few months. The SolarWinds caper –...
D-Link, IoT Devices Under Attack By Tor-Based Gafgyt Variant
A new variant of the Gafgyt botnet – that’s actively targeting vulnerable D-Link and Internet of Things devices – is the first variant of the malware to rely on...
‘Educational’ ransomware program may instead become a how-to guide for attackers
By:
Bradley Barth
A developer published via GitHub a proof-of-concept (POC) ransomware program featuring strong compatibility with the...
Which programming language is the most popular? Hint: it’s not Java
Recent data by the creators of the PYPL PopularitY of Programming Language index, or simply PYPL, shows that the title of the ‘most popular’ programming language is firmly held...
Massive Supply-Chain Cyberattack Breaches Several Airlines
The cyberattack on SITA, a nearly ubiquitous airline service provider, has compromised frequent-flyer data across many carriers.
A communications and IT vendor for 90 percent of the world’s airlines, SITA,...
U.S. DoD Weapons Programs Lack ‘Key’ Cybersecurity Measures
The lack of cybersecurity requirements in weapons contracts from the Department of Defense opens the door for dangerous cyberattacks.
Weapons programs from the U.S. Department of Defense (DoD) are falling...
GitHub and Docker Hub are being used to launch crypto mining malware
Cloud computing has become an ever more present part of our day-to-day lives, but the risks of malware hosted on its platforms are as prevalent as any offline servers....
New SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452
Executive Summary
In August 2020, a U.S.-based entity uploaded a new backdoor that we have named SUNSHUTTLE to a public malware repository.
SUNSHUTTLE is a second-stage backdoor written in GoLang that...
Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities
Beginning in January 2021, Mandiant Managed Defense observed multiple instances of abuse of Microsoft Exchange Server within at least one client environment. The observed activity included creation of web...
BEC scammer infects own device, giving researchers a front-row seat to operations
Written by Sean Lyngaas Mar 4, 2021 |...
