August 2023 – Page 7

Microsoft: BlackCat’s Sphynx ransomware embeds Impacket, RemCom

Microsoft has discovered a new version of the BlackCat ransomware that embeds the Impacket networking framework and the Remcom hacking tool, both enabling spreading laterally across a breached network. […]

17 Aug

Hackers ask $120,000 for access to multi-billion auction house

Hackers have breached the network of a major auction house and offered access to whoever was willing to pay $120,000. […]

17 Aug

Microsoft PowerShell Gallery vulnerable to spoofing, supply chain attacks

Lax policies for package naming on Microsoft’s PowerShell Gallery code repository allow threat actors to perform typosquatting attacks, spoof popular packages and potentially lay the ground for massive supply chain attacks. […]

17 Aug

Phishing campaign steals accounts for Zimbra email servers worlwide

An ongoing phishing campaign has been underway since at least April 2023 that attempts to steal credentials for Zimbra Collaboration email servers worldwide. […]

17 Aug

Windows Task Manager refresh can be paused using CTRL key

A very useful and previously unknown Windows tip was revealed this week, where you can halt process jumping in Task Manager by holding down the Ctrl key on your keyboard, allowing easier access to a listed process. […]

17 Aug

Thousands of Android APKs use compression trick to thwart analysis

Threat actors increasingly distribute malicious Android APKs (packaged app installers) that resist decompilation using unsupported, unknown, or heavily tweaked compression algorithms. […]

17 Aug

Triple Extortion Ransomware and the Cybercrime Supply Chain

Ransomware attacks continue to grow both in sophistication and quantity. Learn more from Flare about ransomware operation’s increasing shift to triple extortion. […]

16 Aug

File sharing site Anonfiles shuts down due to overwhelming abuse

Anonfiles, a popular service for sharing files anonymously, has shut down after saying it can no longer deal with the overwhelming abuse by its users. […]

16 Aug

CISA warns of critical Citrix ShareFile flaw exploited in the wild

CISA is warning that a critical Citrix ShareFile secure file transfer vulnerability tracked as CVE-2023-24489 is being targeted by unknown actors and has added the flaw to its catalog of known security flaws exploited in the wild. […]

16 Aug

Google released first quantum-resilient FIDO2 key implementation

Google has announced the first open-source quantum resilient FIDO2 security key implementation, which uses a unique ECC/Dilithium hybrid signature schema co-created with ETH Zurich. […]

Month: August 2023

Microsoft: BlackCat’s Sphynx ransomware embeds Impacket, RemCom

Hackers ask $120,000 for access to multi-billion auction house

Microsoft PowerShell Gallery vulnerable to spoofing, supply chain attacks

Phishing campaign steals accounts for Zimbra email servers worlwide

Windows Task Manager refresh can be paused using CTRL key

Thousands of Android APKs use compression trick to thwart analysis

Triple Extortion Ransomware and the Cybercrime Supply Chain

File sharing site Anonfiles shuts down due to overwhelming abuse

CISA warns of critical Citrix ShareFile flaw exploited in the wild

Google released first quantum-resilient FIDO2 key implementation