OT Security Firm Shift5 Adds $33 Million in Funding
Arlington, VA-based OT security firm Shift5 has raised an additional $33 million in its Series B financing. $50 million was announced in February 2022. The…
Month: June 2023
WannaCry ransomware impersonator targets Russian “Enlisted” FPS players
A ransomware operation targets Russian players of the Enlisted multiplayer first-person shooter, using a fake website to spread trojanized versions of the game. Enlisted is…
Vidar Malware Using New Tactics to Evade Detection and Anonymize Activities
Jun 15, 2023Ravie LakshmananMalware / Cyber Threat The threat actors behind the Vidar malware have made changes to their backend infrastructure, indicating attempts to retool…
Enterprise software price hikes risk derailing digitial transformation
The price hike in software licences and cloud-based services is no longer just an issue for IT asset managers. The increases are so large that…
XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions
Two cross-site scripting (XSS) vulnerabilities in Azure Bastion and Azure Container Registry (ACR) could have led to unauthorized access to user sessions, data tampering, and…
Russia-linked APT Gamaredon update TTPs in recent attacks against UkraineSecurity Affairs
Russia-linked APT group Gamaredon is using a new toolset in attacks aimed at critical organizations in Ukraine. The Gamaredon APT group (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa)…
Russian hackers use PowerShell USB malware to drop backdoors
The Russian state-sponsored hacking group Gamaredon (aka Armageddon or Shuckworm) continues to target critical organizations in Ukraine’s military and security intelligence sectors, employing a refreshed toolset…
New Supply Chain Attack Exploits Abandoned S3 Buckets to Distribute Malicious Binaries
Jun 15, 2023Ravie LakshmananSoftware Supply Chain In what’s a new kind of software supply chain attack aimed at open source projects, it has emerged that…
BBFC taps into AWS AI portfolio to speed up content classification
The British Board of Film Classification (BBFC) is working with Amazon Web Services (AWS) to explore how artificial intelligence (AI) technologies could be deployed to…
US Organizations Paid $91 Million to LockBit Ransomware Gang
The LockBit ransomware gang has launched roughly 1,700 attacks in the United States and received approximately $91 million in ransom payments, the US government says.…
Barracuda ESG zero-day attacks linked to suspected Chinese hackers
A suspected pro-China hacker group tracked by Mandiant as UNC4841 has been linked to data-theft attacks on Barracuda ESG (Email Security Gateway) appliances using a…
GravityRAT Android Trojan Steals WhatsApp Backups and Deletes Files
Jun 15, 2023Ravie LakshmananMobile Security / Privacy An updated version of an Android remote access trojan dubbed GravityRAT has been found masquerading as messaging apps…