Fraud & Identity Theft Fake IT Workers Funneled Millions to North Korea, DOJ Says The Justice Department announced indictments against 14 North Koreans for involvement in a scheme to pose as remote IT workers to violate sanctions and... Ryan NaraineDecember 12, 2024
Malware & Threats Cleo Patches Exploited Flaw as Security Firms Detail Malware Pushed in Attacks Cleo has released patches for the exploited vulnerability and security firms have detailed the malware delivered in attacks. Eduard KovacsDecember 12, 2024
Mobile & Wireless Apple Pushes Major iOS, macOS Security Updates Cupertino ships iOS 18.2 and macOS Sequoia 15.2 patches to fix data leakage, sandbox escapes and code exection vulnerabilities. Ryan NaraineDecember 11, 2024
Data Protection Google’s Willow Chip Signals the Urgency of Post-Quantum Cryptography Migration Google’s Willow quantum chip marks a transformative moment in quantum computing development. Kevin TownsendDecember 11, 2024
Tracking & Law Enforcement US Charges, Sanctions Chinese Man Accused of Sophos Firewall Hacking The US government announced charges, sanctions and a reward for Guan Tianfeng, a Chinese national accused of involvement in Sophos firewall hacks. Eduard KovacsDecember 11, 2024
Malware & Threats Microsoft Ships Urgent Patch for Exploited Windows CLFS Zero-Day Patch Tuesday: Redmond patches 71 security flaws and calls immediate attention to an exploited Windows zero-day reported by CrowdStrike. Ryan NaraineDecember 10, 2024
Vulnerabilities Cleo File Transfer Tool Vulnerability Exploited in Wild Against Enterprises CVE-2024-50623, an improperly patched vulnerability affecting Cleo file transfer tools, has been exploited in the wild. Eduard KovacsDecember 10, 2024
Cybercrime $50 Million Radiant Capital Heist Blamed on North Korean Hackers Radiant Capital says a North Korean threat actor stole $50 million in assets in a sophisticated October attack. Ionut ArghireDecember 10, 2024
Ransomware Deloitte Responds After Ransomware Group Claims Data Theft Deloitte has issued a response after the Brain Cipher ransomware group claimed to have stolen over 1 TB of information belonging to the company. Eduard KovacsDecember 9, 2024
Nation-State White House Says at Least 8 US Telecom Firms, Dozens of Nations Impacted by China Hacking Campaign A top White House official said at least eight U.S. telecom firms and dozens of nations have been impacted by a Chinese hacking campaign. Associated PressDecember 5, 2024
Malware & Threats Spy v Spy: Russian APT Turla Caught Stealing From Pakistani APT Russia's Turla hackers hijacked 33 command servers operated by Pakistani hackers who had themselves breached Afghanistan and Indian targets. Ryan NaraineDecember 4, 2024
Supply Chain Security Solana Web3.js Library Backdoored in Supply Chain Attack Supply chain attack leads to decentralized application developers downloading backdoored versions of the Solana Web3.js library. Ionut ArghireDecember 4, 2024
Hacker Conversations Hacker Conversations: Dan McInerney and Puzzle-Driven Hacking McInerney’s path to becoming a hacker is subtly different to many other hackers. He started as a 22-year old psychology graduate rather than a... Kevin TownsendDecember 3, 2024
Malware & Threats Prototype UEFI Bootkit is South Korean University Project; LogoFAIL Exploit Discovered The 'Bootkitty' prototype UEFI bootkit contains an exploit for LogoFAIL and was created in a South Korea university program. Ryan NaraineDecember 2, 2024
Cybercrime Russian Hacker With $10 Million Bounty on His Head Reportedly Arrested Russian authorities have reportedly arrested Mikhail Matveev, who is wanted by the US for ransomware attacks against critical infrastructure. Eduard KovacsDecember 2, 2024
Vulnerabilities Microsoft Patches Exploited Vulnerability in Partner Network Website Microsoft informed customers that vulnerabilities affecting cloud, AI and other services have been patched, including an exploited flaw. Eduard KovacsNovember 28, 2024
Nation-State Russian APT Chained Firefox and Windows Zero-Days Against US and European Targets The Russia-linked RomCom APT has been observed chaining two zero-days in Firefox and Windows for backdoor delivery. Ionut ArghireNovember 27, 2024
Ransomware Starbucks, Grocery Stores Hit by Blue Yonder Ransomware Attack Supply chain management software provider Blue Yonder has been targeted in a ransomware attack that caused significant disruptions for some customers. Eduard KovacsNovember 26, 2024
Mobile & Wireless Russian Cyberspies Hacked Building Across Street From Target for Wi-Fi Attack Russian cyberspy group APT28 conducted a Nearest Neighbor Attack, where it hacked into the building across the street from the victim for a Wi-Fi... Eduard KovacsNovember 25, 2024
Cybercrime Microsoft Disrupts ONNX Phishing Service, Names Its Operator Microsoft has seized 240 phishing-related websites and has disrupted the ONNX service, which the company says is run by an Egyptian man. Eduard KovacsNovember 22, 2024