Security Experts:
Ionut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Recent articles by Ionut Arghire
-
IBM analyzes 13 crypters employed by the cybercrime group operating TrickBot, Conti, and several other malware families.
-
Nikkei discloses ransomware attack against its Singapore headquarters, saying customer data was likely impacted.
-
The attackers use sqlps.exe, a utility for running SQL-built cmdlets, to achieve fileless persistence on poorly secured SQL servers.
-
The US Department of Justice has updated its policy regarding violations of CFAA to clearly state that ethical hacking should not be prosecuted.
-
More than $15 million in illicit proceeds derived from the 3ve ad fraud scheme has been transferred from Switzerland to the US.
-
Seclore raises $27 million in a Series C funding round led by Origami Capital Partners and Oquirrh Ventures.
-
Cornami, a company that helps companies secure data from post-quantum threats, raises $68 million in oversubscribed Series C funding.
-
Canada, the Netherlands, New Zealand, the US, and the UK warn that threat actors exploit weak cybersecurity practices for initial access.
-
Impacting the Windows and Linux versions of the driver, the high-severity vulnerabilities could be exploited to achieve code execution and escalation of privileges.
-
A remote code execution vulnerability in Tatsu Builder potentially exposes up to 50,000 websites to attacks.
-
Moises Luis Zagala Gonzalez, a citizen of France and Venezuela, has been charged with building, using, and selling ransomware.
-
Researchers at NCC Group create a tool for conducting a new type of Bluetooth Low Energy (BLE) relay attack that bypasses existing protections.
-
A new variant of the botnet attempts to exploit a critical vulnerability in Spring Cloud Gateway.
-
A high-severity vulnerability resolved in SonicWall SMA1000 series appliances could lead to unauthorized access.
-
New research find the Iran-linked hacking group OilRig using a new backdoor in an attack against a government official within Jordan’s foreign ministry.
-
Israeli startup devOcean launches from stealth with $6 million in funding from Glilot Capital Partners and angel investors.
-
Using an in-memory-only framework designed for long-running, state-sponsored operations, IceApple appears to be the work of a Chinese threat actor.
-
Glib Oleksandr Ivanov-Tolpintsev, 28, operated a botnet for decrypting stolen usernames and passwords, and sold the credentials on a dark web marketplace.
-
Packing various anti-analysis and anti-reversing capabilities, Nerbian RAT is being distributed via emails carrying COVID-19 and World Health Organization themes.
-
Application security startup StackHawk raises $20.7 million in a new investment round co-led by Sapphire Ventures and Costanoa Ventures.
-
The use of ransomware and the targeting of entities outside typical victimology suggest the Iranian APT Charming Kitten might switch to financially-motivated activities.
-
Two vulnerabilities in the UEFI firmware of more than 200 HP laptops and workstations could allow an attacker to gain elevated privileges and run code in the BIOS.
-
Impacting multiple processor models, the security issues could lead to privilege escalation or information disclosure.
-
The latest Chrome iteration resolves 13 vulnerabilities, including nine reported by external researchers.
-
Omnicell noted in a Form 10-Q filing with the US SEC that the incident impacted internal systems and products and services.
Get the Daily Briefing
- DC Sues Zuckerberg Over Cambridge Analytica Privacy Breach
- Conti Ransomware Operation Shut Down After Brand Becomes Toxic
- Facial Recognition Firm Clearview AI Fined $9.4 Million by UK Regulator
- Over $1.1 Million Awarded at Pwn2Own Vancouver 2022 for 25 Zero-Day Vulnerabilities
- Cisco Warns of Exploitation Attempts Targeting New IOS XR Vulnerability
- IBM Dives Into TrickBot Gang's Malware Crypting Operation
- Breach Exposed Data of Half-Million Chicago Students, Staff
- Nikkei Says Customer Data Likely Impacted in Ransomware Attack
- New Brute Force Attacks Against SQL Servers Use PowerShell Wrapper
- DoJ Will No Longer Use CFAA to Charge Ethical Hackers
Copyright © 2022 Wired Business Media. All Rights Reserved. Privacy Policy