11 Nov New bill sets ransomware attack response rules for US financial orgs New legislation introduced this week by US lawmakers aims to set ransomware attack response “rules of road” for US financial institutions. […]
11 Nov Microsoft: New security updates trigger Windows Server auth issues Microsoft says users might experience authentication issues on Domain Controllers (DC) running Windows Server. after installing security updates released during the November Patch Tuesday. […]
10 Nov Lazarus hackers target researchers with trojanized IDA Pro A North Korean state-sponsored hacking group known as Lazarus is again trying to hack security researchers, this time with a trojanized pirated version of the popular IDA Pro reverse engineering application. […]
10 Nov Ironic twist: WP Reset PRO bug lets hackers wipe WordPress sites A high severity security flaw in the WP Reset PRO WordPress plugin can let authenticated attackers wipe vulnerable websites, as revealed by Patchstack security researchers. […]
10 Nov TrickBot teams up with Shatak phishers for Conti ransomware attacks A threat actor tracked as Shatak (TA551) recently partnered with the ITG23 gang (aka TrickBot and Wizard Spider) to deploy Conti ransomware on targeted systems. […]
10 Nov Microsoft patches Excel zero-day used in attacks, asks Mac users to wait During this month’s Patch Tuesday, Microsoft has patched an Excel zero-day vulnerability exploited in the wild by threat actors. […]
10 Nov PhoneSpy: Android spyware campaign targeting South Korean users An ongoing spyware campaign dubbed ‘PhoneSpy’ targets South Korean users via a range of lifestyle apps that nest in the device and silently exfiltrate data. […]
09 Nov Tor Browser 11 removes V2 Onion URL support, adds new UI The Tor Project has released Tor Browser 11.0 with a new user interface design and the removal of support for V2 onion services. […]
09 Nov New PowerShell version comes with Microsoft Update support Microsoft has released PowerShell 7.2 with automatic updates through the Microsoft Update service on Windows 10 and Windows Server devices. […]
09 Nov Clop gang exploiting SolarWinds Serv-U flaw in ransomware attacks The Clop ransomware gang, also tracked as TA505 and FIN11, is exploiting a SolarWinds Serv-U vulnerability to breach corporate networks and ultimately encrypt its devices. […]