28 Jun Ransomware gangs now creating websites to recruit affiliates Ever since two prominent Russian-speaking cybercrime forums banned ransomware-related topics [1, 2], criminal operations have been forced to promote their service through alternative methods. […]
27 Jun Cisco ASA vulnerability actively exploited after exploit released Hackers are scanning for and actively exploiting a vulnerability in Cisco ASA devices after a PoC exploit was published on Twitter. […]
26 Jun Nobelium hackers accessed Microsoft customer support tools Microsoft says they have discovered new attacks conducted by the Russian state-sponsored Nobelium hacking group, including a hacked Microsoft support agent’s computer that exposed customer’s subscription information. […]
26 Jun Microsoft admits to signing rootkit malware in supply-chain fiasco Microsoft has now confirmed signing a malicious driver being distributed within gaming environments. This driver, called “Netfilter,” is in fact a rootkit that was observed communicating with Chinese command-and-control IPs. […]
25 Jun The Week in Ransomware – June 25th 2021 – Back in Business It has been relatively quiet this week, with few attacks revealed and few new ransomware variants released. However, some interesting information came out that we have summarized below. […]
25 Jun Mercedes-Benz data breach exposes SSNs, credit card numbers Mercedes-Benz USA has just disclosed a data breach impacting under 1,000 customers and potential buyers that exposed their credit card information, social security numbers, and driver license numbers. […]
25 Jun Windows 11 won’t work without a TPM – What you need to know Windows 11 requires a TPM 2.0 security processor to install or upgrade to Windows 11. Unfortunately, mistakes in support documents have causes conflicting information on what type of TPM you need and why you need it in the first place. […]
24 Jun WD My Book NAS devices are being remotely wiped clean worldwide Western Digital My Book NAS owners worldwide are finding that their devices have been mysteriously factory reset and all of their files deleted. […]
24 Jun Binance exchange helped track down Clop ransomware money launderers Cryptocurrency exchange service Binance played an important part in the recent arrests of Clop ransomware group members, helping law enforcement in their effort to identify, and ultimately detain the suspects. […]
23 Jun Healthcare giant Grupo Fleury hit by REvil ransomware attack Brazilian medical diagnostic company Grupo Fleury has suffered a ransomware attack that has disrupted business operations after the company took its systems offline. […]