Advisory Offers BlackByte IoCs and Mitigations
A joint advisory from the FBI and the US Secret Service warns that BlackByte ransomware has been used against organizations in at least three US critical infrastructure sectors. The advisory…
A joint advisory from the FBI and the US Secret Service warns that BlackByte ransomware has been used against organizations in at least three US critical infrastructure sectors. The advisory…
Ukraine’s Ministry of Defense, its Armed Forces, and two state-run banks are being targeted by distributed denial-of-service (DDoS) attacks. In this case, reports indicate that the attacks took advantage of…
CISA has compiled and published a list of free cybersecurity services and tools to help organizations reduce cybersecurity risk and strengthen resiliency. Ref https://www.cisa.gov/free-cybersecurity-services-and-tools
Ransomware tactics and techniques continued to evolve in 2021, which demonstrates ransomware threat actors’ growing technological sophistication and an increased ransomware threat to organizations globally. More information https://www.cisa.gov/uscert/ncas/alerts/aa22-040a
Historically, Russian state-sponsored cyber actors have used common but effective tactics to gain access to target networks, including spearphishing, credential harvesting, brute force/password spray techniques, and known vulnerability exploitation against…
Apple addressed CVE-2022-22620 with improved memory management in iOS 15.3.1, iPadOS 15.3.1, and macOS Monterey 12.2.1. More information here https://www.bleepingcomputer.com/news/security/apple-patches-new-zero-day-exploited-to-hack-iphones-ipads-macs/
Disappointed with the lack of US response to the Hermit Kingdom's attacks against US security researchers, one hacker took matters into his own hands. Ref https://www.wired.com/story/north-korea-hacker-internet-outage/
ESET has recently published patches to fix a local privilege escalation vulnerability detected in all the clients of its Windows products that enables the threat actors to escalate privileges and…
The latest decentralized finance project to suffer at the hands of hackers is Qubit Finance as reports trickle in of large losses. Read more https://beincrypto.com/qubit-finance-hacked-for-80-million-in-latest-defi-exploit/
The Cyberspace Administration of China (CAC) has shared its spring-cleaning plans with the world – and suggested it’s time to make the Middle Kingdom’s web sites sparkle with wholesome content.…