Menu

Link

Log4Shell: The race is on to fix millions of systems and internet-connected devices
Kronos Ransomware Outage Drives Widespread Payroll Chaos
Where the Latest Log4Shell Attacks Are Coming From
Malicious PyPI Code Packages Rack Up Thousands of Downloads
Log4Shell Is Spawning Even Nastier Mutations
Next-Gen Maldocs & How to Solve the Human Vulnerability
‘Appalling’ Riot Games Job Fraud Takes Aim at Wallets
Zero Day in Ubiquitous Apache Log4j Tool Under Active Attack
Sprawling Active Attack Aims to Take Over 1.6M WordPress Sites
‘Karakurt’ Extortion Threat Emerges, But Says No to Ransomware
Canadian Ransomware Arrest Is a Meaningful Flex, Experts Say
Fueled by Pandemic Realities, Grinchbots Aggressively Surge in Activity
How MikroTik Routers Became a Cybercriminal Target
Smashing Security podcast #255: Revolting receipts, a Twitter fandango, and shopkeeper cyber tips
Malicious npm Code Packages Built for Hijacking Discord Servers
Moobot Botnet Chews Up Hikvision Surveillance Systems
Not with a Bang but a Whisper: The Shift to Stealthy C2
Critical SonicWall VPN Bugs Allow Complete Appliance Takeover
AWS Among 12 Cloud Services Affected by Flaws in Eltima SDK
Emotet’s Behavior & Spread Are Omens of Ransomware Attacks
Windows 10 Drive-By RCE Triggered by Default URI Handler
When Scammers Get Scammed, They Take It to Cybercrime Court
Leaked Downing Street video footage exposes staff laughing about party
Ransomware hits Spar supermarkets and petrol stations
Google Takes Down Glupteba Botnet; Files Lawsuit Against Operators
SolarWinds Attackers Spotted Using New Tactics, Malware
Crypto-Exchange BitMart to Pay Users for $200M Theft
Are You Guilty of These 8 Network-Security Bad Practices?
Cyber Command Publicly Joins Fight Against Ransomware Groups  
Cuba Ransomware Gang Hauls in $44M in Payouts
Pegasus Spyware Infects U.S. State Department iPhones
Apache Kafka Cloud Clusters Expose Sensitive Data for Large Companies
Ransomware – how to stop it, and how to survive an attack. Free eBook by Recorded Future
Pandemic-Influenced Car Shopping: Just Use the Manufacturer API
Omicron Phishing Scam Already Spotted in UK
What Are Your Top Cloud Security Challenges? Threatpost Poll
UK Government fined £500,000 after revealing home addresses in New Year honours data breach
Threat Group Takes Aim Again at Cloud Platform Provider Zoho
Man charged with Ubiquiti data breach and extortion was employee assigned to investigate hack
‘Double-Extortion’ Ransomware Damage Skyrockets 935%
Planned Parenthood Breach Opens Patients to Follow-On Attacks
AT&T Takes Steps to Mitigate Botnet Found Inside Its Network 
FluBot malware warning after 70,000 attacks launched over SMS
1Password 8 for Windows – improved productivity, and enhanced security & privacy
Smashing Security podcast #254: A dead hamster, a brass pen, and The Beatles
80K Retail WooCommerce Sites Exposed by Plugin XSS Bug
Stealthy ‘WIRTE’ Gang Targets Middle Eastern Governments
Widespread ‘Smishing’ Campaign Defrauds Iranian Android Users
How Decryption of Network Traffic Can Improve Security
Lloyd’s Carves Out Cyber-Insurance Exclusions for State-Sponsored Attacks
Finland Faces Blizzard of Flubot-Spreading Text Messages
Panasonic’s Data Breach Leaves Open Questions
Yanluowang Ransomware Tied to Thieflock Threat Actor
IKEA Hit by Email Reply-Chain Cyberattack
Researchers Flag 300K Banking Trojan Infections from Google Play in 4 Months
ScarCruft APT Mounts Desktop/Mobile Double-Pronged Spy Attacks
Unpatched Windows Zero-Day Allows Privileged File Access
Shape-Shifting ‘Tardigrade’ Malware Hits Vaccine Makers
Social media firms will be forced to unmask online trolls, says Australia
Couple arrested for secretly installing cryptomining software on department store PCs
Try out 1Password 8 for Windows, where security meets productivity
Sophisticated Tardigrade malware launches attacks on vaccine manufacturing infrastructure
New Twists on Gift-Card Scams Flourish on Black Friday
Smashing Security podcast #253: Cybercrime unicorns, HVAC hacks, and NFT piracy – with Mikko Hyppönen
New UK IoT law means huge fines and a ban on default passwords
9.3M+ Androids Running ‘Malicious’ Games from Huawei AppGallery
GoDaddy Breach Widens to Include Reseller Subsidiaries
Apple’s NSO Group Lawsuit Amps Up Pressure on Pegasus Spyware-Maker
Attackers Actively Target Windows Installer Zero-Day
Attackers Will Flock to Crypto Wallets, Linux in 2022: Podcast
Common Cloud Misconfigurations Exploited in Minutes, Report
GoDaddy hack exposes accounts of 1.2 million customers
GoDaddy’s Latest Breach Affects 1.2M Customers
On the trail of Russia’s $100 million Evil Corp hacking gang
Online Merchants: Prevent Fraudsters from Becoming Holiday Grinches
Attackers Hijack Email Threads Using ProxyLogon/ProxyShell Flaws
Imunify360 Bug Leaves Linux Web Servers Open to Code Execution, Takeover
Iranians Charged in Cyberattacks Against U.S. 2020 Election
6M Sky Routers Left Exposed to Attack for Nearly 1.5 Years
Beware Monzo phishing scams via SMS
Boffins say they can spot a hidden spy cam with just a smartphone
California Pizza Kitchen Serves Up Employee SSNs in Data Breach
Ransomware Phishing Emails Sneak Through SEGs
3 Top Tools for Defending Against Phishing Attacks
FBI: FatPipe VPN Zero-Day Exploited by APT for 6 Months
The UK pushes for better supply chain cyber security
Spear-Phishing Campaign Exploits Glitch Platform to Steal Credentials
How to Choose the Right DDoS Protection Solution
Smashing Security podcast #252: Hotel hacks, workplace spies, and the FBI
Fake Ransomware Infection Hits WordPress Sites
Netflix Bait: Phishers Target Streamers with Fake Service Signups
Exchange, Fortinet Flaws Being Exploited by Iranian APT, CISA Warns
Phishing Scam Aims to Hijack TikTok ‘Influencer’ Accounts
FBI Email Hoaxer ID’ed by the Guy He Allegedly Loves to Torment
Rooting Malware Is Back for Mobile. Here’s What to Look Out For.
200M Adult Cam Model, User Records Exposed in Stripchat Breach
MosesStaff Locks Up Targets, with No Ransom Demand, No Decryption
1Password 8 for Windows: Security, meet productivity
Emotet Resurfaces on the Back of TrickBot After Nearly a Year
The Best Ransomware Response, According to the Data