Exploitation of Barracuda ESG appliances linked to Chinese spies
Cyber security researchers at Google Cloud’s Mandiant have linked exploitation of a zero-day vulnerability existing in a limited subset of Barracuda Email Security Gateway (ESG)…
Latest Cybersecurity News — Page 5494
View all →
OWASP APIsec Top-10 2023 Is Here | API Security Newsletter
Welcome to our May API newsletter, recapping some of the events of last month. As the old proverb goes, April showers bring May flowers –…
OT Security Firm Shift5 Adds $33 Million in Funding
Arlington, VA-based OT security firm Shift5 has raised an additional $33 million in its Series B financing. $50 million was announced in February 2022. The…
WannaCry ransomware impersonator targets Russian “Enlisted” FPS players
A ransomware operation targets Russian players of the Enlisted multiplayer first-person shooter, using a fake website to spread trojanized versions of the game. Enlisted is…
Vidar Malware Using New Tactics to Evade Detection and Anonymize Activities
Jun 15, 2023Ravie LakshmananMalware / Cyber Threat The threat actors behind the Vidar malware have made changes to their backend infrastructure, indicating attempts to retool…
Enterprise software price hikes risk derailing digitial transformation
The price hike in software licences and cloud-based services is no longer just an issue for IT asset managers. The increases are so large that…
XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions
Two cross-site scripting (XSS) vulnerabilities in Azure Bastion and Azure Container Registry (ACR) could have led to unauthorized access to user sessions, data tampering, and…
Russia-linked APT Gamaredon update TTPs in recent attacks against UkraineSecurity Affairs
Russia-linked APT group Gamaredon is using a new toolset in attacks aimed at critical organizations in Ukraine. The Gamaredon APT group (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa)…
Russian hackers use PowerShell USB malware to drop backdoors
The Russian state-sponsored hacking group Gamaredon (aka Armageddon or Shuckworm) continues to target critical organizations in Ukraine’s military and security intelligence sectors, employing a refreshed toolset…
New Supply Chain Attack Exploits Abandoned S3 Buckets to Distribute Malicious Binaries
Jun 15, 2023Ravie LakshmananSoftware Supply Chain In what’s a new kind of software supply chain attack aimed at open source projects, it has emerged that…
BBFC taps into AWS AI portfolio to speed up content classification
The British Board of Film Classification (BBFC) is working with Amazon Web Services (AWS) to explore how artificial intelligence (AI) technologies could be deployed to…
US Organizations Paid $91 Million to LockBit Ransomware Gang
The LockBit ransomware gang has launched roughly 1,700 attacks in the United States and received approximately $91 million in ransom payments, the US government says.…