Barracuda ESG zero-day exploited by China-linked APTSecurity Affairs
Experts linked the UNC4841 threat actor behind the attacks exploiting the recently patched Barracuda ESG zero-day to China. Mandiant researchers linked the threat actor UNC4841…
Category: Securityaffairs
Russia-linked APT Gamaredon update TTPs in recent attacks against UkraineSecurity Affairs
Russia-linked APT group Gamaredon is using a new toolset in attacks aimed at critical organizations in Ukraine. The Gamaredon APT group (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa)…
Cybersecurity agencies published a LockBit ransomware advisorySecurity Affairs
The LockBit ransomware group successfully extorted roughly $91 million from approximately 1,700 U.S. organizations since 2020. According to a joint advisory published by cybersecurity agencies,…
Microsoft links Cadet Blizzard APT to Russia military intel GRUSecurity Affairs
Microsoft linked a series of wiping attacks to a Russia-linked APT group, tracked as Cadet Blizzard, that is under the control of the GRU. Microsoft attributes…
Critical flaw found in the WooCommerce Stripe Gateway PluginSecurity Affairs
Hundreds of thousands of online stores are potentially exposed to hacking due to a critical vulnerability in the WooCommerce Stripe Payment Gateway plugin. The WooCommerce…
a malware epidemic in WordPressSecurity Affairs
Learn the shocking truth behind the Balada Injector campaign and find out how to protect your organization from this relentless viral invasion. A deadly cyber…
China-linked APT UNC3886 used VMware ESXi Zero-DaySecurity Affairs
A China-linked APT group tracked as UNC3886 has been spotted exploiting a VMware ESXi zero-day vulnerability. Mandiant researchers observed a China-linked cyberespionage group, tracked as…
Xplain data breach also impacted national Swiss railway FSSSecurity Affairs
The Play ransomware attack suffered by the IT services provider Xplain also impacted the national railway company of Switzerland (FSS) and the canton of Aargau.…
Fortinet urges to patch a critical RCE flaw in Fortigate firewallsSecurity Affairs
Fortinet released security updates to fix a critical security flaw in its FortiGate firewalls that lead to remote code execution. Fortinet has released security patches…
Microsoft Patch Tuesday for June 2023 fixes 6 critical flawsSecurity Affairs
Microsoft Patch Tuesday security updates for June 2023 fixed 69 flaws in its products, including six critical issues. Microsoft Patch Tuesday security updates for June…
FUD Malware obfuscation engine BatCloak continues to evolveSecurity Affairs
Researchers detailed a fully undetectable (FUD) malware obfuscation engine named BatCloak that is used by threat actors. Researchers from Trend Micro have analyzed the BatCloak, a fully…
Intellihartx data breach exposed personal and health info of 490K individualsSecurity Affairs
Intellihartx is notifying about 490,000 individuals that their personal information was compromised in the GoAnywhere zero-day attack in January. The Clop ransomware group has stolen…