Shell is another victim of Clop ransomware attacksSecurity Affairs
British multinational oil and gas company Shell has confirmed that it has suffered a ransomware attack conducted by the Clop group. Oil and Gas giant Shell has confirmed that it…
Category: Securityaffairs
Progress fixed a third flaw in MOVEit Transfer softwareSecurity Affairs
Progress Software addressed a third vulnerability impacting its MOVEit Transfer application that could lead to privilege escalation and information disclosure. Progress Software disclosed a new SQL injection…
Updated Android spyware GravityRAT steals WhatsApp BackupsSecurity Affairs
An updated version of the Android remote access trojan GravityRAT can steal WhatsApp backup files and can delete files ESET researchers discovered an updated version of…
Barracuda ESG zero-day exploited by China-linked APTSecurity Affairs
Experts linked the UNC4841 threat actor behind the attacks exploiting the recently patched Barracuda ESG zero-day to China. Mandiant researchers linked the threat actor UNC4841…
Russia-linked APT Gamaredon update TTPs in recent attacks against UkraineSecurity Affairs
Russia-linked APT group Gamaredon is using a new toolset in attacks aimed at critical organizations in Ukraine. The Gamaredon APT group (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa)…
Cybersecurity agencies published a LockBit ransomware advisorySecurity Affairs
The LockBit ransomware group successfully extorted roughly $91 million from approximately 1,700 U.S. organizations since 2020. According to a joint advisory published by cybersecurity agencies,…
Microsoft links Cadet Blizzard APT to Russia military intel GRUSecurity Affairs
Microsoft linked a series of wiping attacks to a Russia-linked APT group, tracked as Cadet Blizzard, that is under the control of the GRU. Microsoft attributes…
Critical flaw found in the WooCommerce Stripe Gateway PluginSecurity Affairs
Hundreds of thousands of online stores are potentially exposed to hacking due to a critical vulnerability in the WooCommerce Stripe Payment Gateway plugin. The WooCommerce…
a malware epidemic in WordPressSecurity Affairs
Learn the shocking truth behind the Balada Injector campaign and find out how to protect your organization from this relentless viral invasion. A deadly cyber…
China-linked APT UNC3886 used VMware ESXi Zero-DaySecurity Affairs
A China-linked APT group tracked as UNC3886 has been spotted exploiting a VMware ESXi zero-day vulnerability. Mandiant researchers observed a China-linked cyberespionage group, tracked as…
Xplain data breach also impacted national Swiss railway FSSSecurity Affairs
The Play ransomware attack suffered by the IT services provider Xplain also impacted the national railway company of Switzerland (FSS) and the canton of Aargau.…
Fortinet urges to patch a critical RCE flaw in Fortigate firewallsSecurity Affairs
Fortinet released security updates to fix a critical security flaw in its FortiGate firewalls that lead to remote code execution. Fortinet has released security patches…