Kraken ransomware benchmarks systems for optimal encryption choice
The Kraken ransomware, which targets Windows, Linux/VMware ESXi systems, is testing machines to check how fast it can encrypt data without overloading them. According to…
Author: Cybernoz
Fortinet FortiWeb flaw with public PoC exploited to create admin users
A Fortinet FortiWeb path traversal vulnerability is being actively exploited to create new administrative users on exposed devices without requiring authentication. The issue is fixed…
FortiWeb Authentication Bypass Vulnerability Exploited
Threat actors are actively exploiting a critical authentication bypass vulnerability in Fortinet’s FortiWeb web application firewall (WAF) worldwide, prompting defenders to heighten vigilance. Researchers at…
Akira actively engaged in ransomware attacks against critical sectors
The FBI and Cybersecurity and Infrastructure Security Agency on Thursday warned that Akira ransomware is actively launching attacks against critical industries by exploiting vulnerabilities in…
New ‘IndonesianFoods’ worm floods npm with 100,000 packages
A self-spreading package published on npm spams the registry by spawning new packages every every seven seconds, creating large volumes of junk. The worm, dubbed ‘IndonesianFoods,’…
Teachers Mutual Bank automates KYC across brands
Teachers Mutual Bank Limited is streamlining its compliance obligations by automating customer verification processes for some of its 220,000 members. Australia’s largest mutual banking group…
CISA warns of Akira ransomware Linux encryptor targeting Nutanix VMs
US government agencies are warning that the Akira ransomware operation has been spotted encrypting Nutanix AHV virtual machines in attacks. An updated joint advisory from…
How Adversaries Exploit the Blind Spots in Your EASM Strategy – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
Internet-facing assets like domains, servers, or networked device endpoints are where attackers look first, probing their target’s infrastructure to determine if there is a viable…
FBI calls Akira ‘top five’ ransomware variant out of 130 targeting US businesses
Federal cyber authorities shared new details Thursday about the Akira ransomware group’s techniques, the tools it uses and vulnerabilities it exploits for initial access alongside…
Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests’ Payment Data
A Russian-speaking threat behind an ongoing, mass phishing campaign has registered more than 4,300 domain names since the start of the year. The activity, per…
Akira Ransomware Group Poses ‘Imminent Threat,’ CISA Warns
The Akira ransomware group poses an “imminent threat to critical infrastructure,” the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today. CISA joined with the…
Google Sues ‘Lighthouse’ Phishing-as-a-service Kit Behind Massive Phishing Attacks
Google security researchers recently uncovered a sophisticated criminal operation called “Lighthouse” that has victimized over one million people across more than 120 countries. This phishing-as-a-service…