DATE |
NAME |
CATEGORY |
WEB |
30.11.23 |
This Free Solution Provides Essential Third-Party Risk Management for SaaS |
Security |
The Hacker News |
30.11.23 |
North Korea's Lazarus Group Rakes in $3 Billion from Cryptocurrency Hacks |
Cryptocurrency |
The Hacker News |
30.11.23 |
CACTUS Ransomware Exploits Qlik Sense Vulnerabilities in Targeted Attacks |
Ransom |
The Hacker News |
30.11.23 |
U.S. Treasury Sanctions Sinbad Cryptocurrency Mixer Used by North Korean Hackers |
Cryptocurrency |
The Hacker News |
29.11.23 |
Iranian Hackers Exploit PLCs in Attack on Water Authority in U.S. |
Exploit |
The Hacker News |
29.11.23 |
200+ Malicious Android Apps Targeting Iranian Banks: Experts Warn |
Android |
The Hacker News |
29.11.23 |
Okta Discloses Broader Impact Linked to October 2023 Support System Breach |
Incindent |
The Hacker News |
29.11.23 |
DJVU Ransomware's Latest Variant 'Xaro' Disguised as Cracked Software |
Ransom |
The Hacker News |
29.11.23 |
GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability |
BotNet |
The Hacker News |
29.11.23 |
Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability |
Vulnerebility |
The Hacker News |
29.11.23 |
Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access |
Vulnerebility |
The Hacker News |
28.11.23 |
Key Cybercriminals Behind Notorious Ransomware Families Arrested in Ukraine |
Ransom |
The Hacker News |
28.11.23 |
Hackers Can Exploit 'Forced Authentication' to Steal Windows NTLM Tokens |
Exploit |
The Hacker News |
28.11.23 |
N. Korean Hackers 'Mixing' macOS Malware Tactics to Evade Detection |
Apple |
The Hacker News |
28.11.23 |
Microsoft deprecates Defender Application Guard for Office |
Safety |
BleepingComputer |
28.11.23 |
Ransomware attack on indie game maker wiped all player accounts |
Ransom |
BleepingComputer |
28.11.23 |
Healthcare giant Henry Schein hit twice by BlackCat ransomware |
Ransom |
BleepingComputer |
28.11.23 |
Ukraine says it hacked Russian aviation agency, leaks data |
Incindent |
BleepingComputer |
28.11.23 |
Ardent hospital ERs disrupted in 6 states after ransomware attack |
Ransom |
BleepingComputer |
28.11.23 |
Slovenia's largest power provider HSE hit by ransomware attack |
Ransom |
BleepingComputer |
28.11.23 |
New Rust-based SysJoker backdoor linked to Hamas hackers |
Virus |
BleepingComputer |
28.11.23 |
General Electric investigates claims of cyber attack, data theft |
Incindent |
BleepingComputer |
28.11.23 |
Atomic Stealer malware strikes macOS via fake browser updates |
Virus |
BleepingComputer |
27.11.23 |
Experts Uncover Passive Method to Extract Private RSA Keys from SSH Connections |
Safety |
The Hacker News |
27.11.23 |
U.S., U.K., and Global Partners Release Secure AI System Development Guidelines |
AI |
The Hacker News |
26.11.23 |
Hacking Employers and Seeking Employment: Two Job-Related Campaigns Bear Hallmarks of North Korean Threat Actors |
APT blog |
Palo Alto |
26.11.23 |
THE PLATFORM MATTERS: A COMPARATIVE STUDY ON LINUX AND WINDOWS RANSOMWARE ATTACKS |
Ransom blog |
Checkpoint |
26.11.23 |
ISRAEL-HAMAS WAR SPOTLIGHT: SHAKING THE RUST OFF SYSJOKER |
BigBrother blog |
Checkpoint |
26.11.23 |
Telekopye's tricks of the trade – Week in security with Tony Anscombe |
BigBrother blog |
Eset |
26.11.23 |
Telekopye: Chamber of Neanderthals’ secrets |
BigBrother blog |
Eset |
26.11.23 |
Your voice is my password |
Safety blog |
Eset |
26.11.23 |
Fuel for thought: Can a driverless car get arrested? |
Cyber blog |
Eset |
25.11.23 |
Critical bug in ownCloud file sharing app exposes admin passwords |
Vulnerebility |
BleepingComputer |
25.11.23 |
UK and South Korea: Hackers use zero-day in supply-chain attack |
Attack |
BleepingComputer |
25.11.23 |
Cyberattack on IT provider CTS impacts dozens of UK law firms |
Hack |
BleepingComputer |
25.11.23 |
New 'HrServ.dll' Web Shell Detected in APT Attack Targeting Afghan Government |
APT |
The Hacker News |
25.11.23 |
Warning: 3 Critical Vulnerabilities Expose ownCloud Users to Data Breaches |
Vulnerebility |
The Hacker News |
25.11.23 |
Cybercriminals Using Telekopye Telegram Bot to Craft Phishing Scams on a Grand Scale |
Phishing |
The Hacker News |
25.11.23 |
Hamas-Linked Cyberattacks Using Rust-Powered SysJoker Backdoor Against Israel |
BigBrothers |
The Hacker News |
24.11.23 |
Kubernetes Secrets of Fortune 500 Companies Exposed in Public Repositories |
Incindent |
The Hacker News |
24.11.23 |
Konni Group Using Russian-Language Malicious Word Docs in Latest Attacks |
Virus |
The Hacker News |
24.11.23 |
Alert: New WailingCrab Malware Loader Spreading via Shipping-Themed Emails |
Virus |
The Hacker News |
24.11.23 |
Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS Attacks |
BotNet |
The Hacker News |
23.11.23 |
Kansas courts confirm data theft, ransom demand after cyberattack |
Ransom |
BleepingComputer |
23.11.23 |
Windows Hello auth bypassed on Microsoft, Dell, Lenovo laptops |
Vulnerebility |
BleepingComputer |
23.11.23 |
Welltok data breach exposes data of 8.5 million US patients |
Incindent |
BleepingComputer |
23.11.23 |
Microsoft: Lazarus hackers breach CyberLink in supply chain attack |
Incindent |
BleepingComputer |
23.11.23 |
New botnet malware exploits two zero-days to infect NVRs and routers |
BotNet |
BleepingComputer |
23.11.23 |
Open-source Blender project battling DDoS attacks since Saturday |
Attack |
BleepingComputer |
23.11.23 |
Hacktivists breach U.S. nuclear research lab, steal employee data |
Incindent |
BleepingComputer |
23.11.23 |
Malware dev says they can revive expired Google auth cookies |
Virus |
BleepingComputer |
23.11.23 |
Microsoft launches Defender Bounty Program with $20,000 rewards |
Security |
BleepingComputer |
23.11.23 |
Auto parts giant AutoZone warns of MOVEit data breach |
Incindent |
BleepingComputer |
23.11.23 |
CISA orders federal agencies to patch Looney Tunables Linux bug |
BigBrothers |
BleepingComputer |
23.11.23 |
Citrix warns admins to kill NetScaler user sessions to block hackers |
Virus |
BleepingComputer |
23.11.23 |
DarkGate and Pikabot malware emerge as Qakbot’s successors |
Virus |
BleepingComputer |
23.11.23 |
Criminal IP Becomes VirusTotal IP and URL Scan Contributor |
Cyber |
BleepingComputer |
23.11.23 |
North Korean Hackers Distribute Trojanized CyberLink Software in Supply Chain Attack |
Hack |
The Hacker News |
23.11.23 |
New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login |
Vulnerebility |
The Hacker News |
23.11.23 |
North Korean Hackers Pose as Job Recruiters and Seekers in Malware Campaigns |
Hack |
The Hacker News |
22.11.23 |
ClearFake Campaign Expands to Deliver Atomic Stealer on Macs Systems |
Virus |
The Hacker News |
22.11.23 |
LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In |
Ransom |
The Hacker News |
22.11.23 |
Play Ransomware Goes Commercial - Now Offered as a Service to Cybercriminals |
Ransom |
The Hacker News |
22.11.23 |
New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks |
Virus |
The Hacker News |
22.11.23 |
How Multi-Stage Phishing Attacks Exploit QRs, CAPTCHAs, and Steganography |
Phishing |
The Hacker News |
22.11.23 |
Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits |
Virus |
The Hacker News |
21.11.23 |
Tor Project removes relays because of for-profit, risky activity |
Security |
BleepingComputer |
21.11.23 |
Gamaredon's LittleDrifter USB malware spreads beyond Ukraine |
Virus |
BleepingComputer |
21.11.23 |
Microsoft fixes ‘Something Went Wrong’ Office sign-in errors |
OS |
BleepingComputer |
21.11.23 |
VX-Underground malware collective framed by Phobos ransomware |
Ransom |
BleepingComputer |
21.11.23 |
Cybersecurity firm executive pleads guilty to hacking hospitals |
Hack |
BleepingComputer |
21.11.23 |
Canadian government discloses data breach after contractor hacks |
Incindent |
BleepingComputer |
21.11.23 |
Kinsing malware exploits Apache ActiveMQ RCE to plant rootkits |
Exploit |
BleepingComputer |
21.11.23 |
Rhysida ransomware gang claims British Library cyberattack |
Ransom |
BleepingComputer |
21.11.23 |
How to boost Security with Self-Service Password Resets |
Security |
BleepingComputer |
21.11.23 |
Lumma Stealer malware now uses trigonometry to evade detection |
Virus |
BleepingComputer |
21.11.23 |
Russian hackers use Ngrok feature and WinRAR exploit to attack embassies |
Exploit |
BleepingComputer |
21.11.23 |
Researchers extract RSA keys from SSH server signing errors |
Safety |
BleepingComputer |
21.11.23 |
Malicious Apps Disguised as Banks and Government Agencies Targeting Indian Android Users |
Android |
The Hacker News |
21.11.23 |
Mustang Panda Hackers Targets Philippines Government Amid South China Sea Tensions |
BigBrothers |
The Hacker News |
21.11.23 |
NetSupport RAT Infections on the Rise - Targeting Government and Business Sectors |
Virus |
The Hacker News |
21.11.23 |
DarkGate and PikaBot Malware Resurrect QakBot's Tactics in New Phishing Attacks |
Virus |
The Hacker News |
20.11.23 |
LummaC2 Malware Deploys New Trigonometry-Based Anti-Sandbox Technique |
Virus |
The Hacker News |
20.11.23 |
Randstorm Exploit: Bitcoin Wallets Created b/w 2011-2015 Vulnerable to Hacking |
Exploit |
The Hacker News |
20.11.23 |
Indian Hack-for-Hire Group Targeted U.S., China, and More for Over 10 Years |
BigBrothers |
The Hacker News |
19.11.23 |
Windows 10 to let admins control how optional updates are deployed |
OS |
BleepingComputer |
19.11.23 |
FCC adopts new rules to protect consumers from SIM-swapping attacks |
Attack |
BleepingComputer |
19.11.23 |
Exploit for CrushFTP RCE chain released, patch now |
Exploit |
BleepingComputer |
19.11.23 |
Google shares plans for blocking third-party cookies in Chrome |
Security |
BleepingComputer |
19.11.23 |
The Week in Ransomware - November 17th 2023 - Citrix in the Crosshairs |
Ransom |
BleepingComputer |
19.11.23 |
Bloomberg Crypto X account snafu leads to Discord phishing attack |
Phishing |
BleepingComputer |
19.11.23 |
Yamaha Motor confirms ransomware attack on Philippines subsidiary |
Ransom |
BleepingComputer |
19.11.23 |
Google: Hackers exploited Zimbra zero-day in attacks on govt orgs |
Exploit |
BleepingComputer |
19.11.23 |
CISA warns of actively exploited Windows, Sophos, and Oracle bugs |
Exploit |
BleepingComputer |
19.11.23 |
British Library: Ongoing outage caused by ransomware attack |
Ransom |
BleepingComputer |
19.11.23 |
Long Beach, California turns off IT systems after cyberattack |
Incindent |
BleepingComputer |
19.11.23 |
FBI shares tactics of notorious Scattered Spider hacker collective |
Hack |
BleepingComputer |
19.11.23 |
MySQL servers targeted by 'Ddostf' DDoS-as-a-Service botnet |
BotNet |
BleepingComputer |
19.11.23 |
Toyota confirms breach after Medusa ransomware threatens to leak data |
Incindent |
BleepingComputer |
19.11.23 |
Fortinet warns of critical command injection bug in FortiSIEM |
Vulnerebility |
BleepingComputer |
19.11.23 |
How DDoS attacks are taking down even the largest tech companies |
Attack |
BleepingComputer |
18.11.23 |
Stately Taurus Targets the Philippines As Tensions Flare in the South Pacific |
APT blog |
Palo Alto |
18.11.23 |
MALWARE SPOTLIGHT – INTO THE TRASH: ANALYZING LITTERDRIFTER |
Malware blog |
Checkpoint |
18.11.23 |
A deep dive into Phobos ransomware, recently deployed by 8Base group |
Malware blog |
Cisco Blog |
18.11.23 |
Understanding the Phobos affiliate structure and activity |
Malware blog |
Cisco Blog |
18.11.23 |
7 common mistakes companies make when creating an incident response plan and how to avoid them |
Incident blog |
Cisco Blog |
18.11.23 |
Attackers use JavaScript URLs, API forms and more to scam users in popular online game “Roblox” |
Spam blog |
Cisco Blog |
18.11.23 |
We all just need to agree that ad blockers are good |
Security blog |
Cisco Blog |
18.11.23 |
Microsoft discloses only three critical vulnerabilities in November’s Patch Tuesday update, three other zero-days |
OS Blog |
Cisco Blog |
18.11.23 |
A new video series, Google Forms spam and the various gray areas of cyber attacks |
Spam blog |
Cisco Blog |
18.11.23 |
Threat Roundup for November 3 to November 10 |
Cyber blog |
Cisco Blog |
18.11.23 |
Spammers abuse Google Forms’ quiz to deliver scams |
Spam blog |
Cisco Blog |
18.11.23 |
What is NIS2, and how can you best prepare for the new cybersecurity requirements in the EU? |
Safety blog |
Cisco Blog |
18.11.23 |
Threat Roundup for October 27 to November 3 |
Cyber blog |
Cisco Blog |
18.11.23 |
You’d be surprised to know what devices are still using Windows CE |
OS Blog |
Cisco Blog |
18.11.23 |
Safeguarding ports from the rising tide of cyberthreats – Week in security with Tony Anscombe |
Safety blog |
Eset |
18.11.23 |
Is your LinkedIn profile revealing too much? |
Social blog |
Eset |
18.11.23 |
8Base Group Deploying New Phobos Ransomware Variant via SmokeLoader |
Virus |
The Hacker News |
18.11.23 |
Russian Cyber Espionage Group Deploys LitterDrifter USB Worm in Targeted Attacks |
Virus |
The Hacker News |
17.11.23 |
Beware: Malicious Google Ads Trick WinSCP Users into Installing Malware |
Virus |
The Hacker News |
17.11.23 |
FCC Enforces Stronger Rules to Protect Customers Against SIM Swapping Attacks |
Attack |
The Hacker News |
17.11.23 |
27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT Experts |
Virus |
The Hacker News |
17.11.23 |
U.S. Cybersecurity Agencies Warn of Scattered Spider's Gen Z Cybercrime Ecosystem |
BigBrothers |
The Hacker News |
17.11.23 |
CISA Adds Three Security Flaws with Active Exploitation to KEV Catalog |
Vulnerebility |
The Hacker News |
17.11.23 |
Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker Groups |
Vulnerebility |
The Hacker News |
17.11.23 |
Experts Uncover DarkCasino: New Emerging APT Threat Exploiting WinRAR Flaw |
APT |
The Hacker News |
16.11.23 |
Ransomware gang files SEC complaint over victim’s undisclosed breach |
Ransom |
BleepingComputer |
16.11.23 |
Samsung hit by new data breach impacting UK store customers |
Incindent |
BleepingComputer |
16.11.23 |
Microsoft fixes Windows Server VMs broken by October updates |
Vulnerebility |
BleepingComputer |
16.11.23 |
Citrix Hypervisor gets hotfix for new Reptar Intel CPU flaw |
Vulnerebility |
BleepingComputer |
16.11.23 |
Toronto Public Library confirms data stolen in ransomware attack |
Ransom |
BleepingComputer |
16.11.23 |
FBI and CISA warn of opportunistic Rhysida ransomware attacks |
Ransom |
BleepingComputer |
16.11.23 |
PJ&A says cyberattack exposed data of nearly 9 million patients |
Incindent |
BleepingComputer |
16.11.23 |
Fraudsters make $50,000 a day by spoofing crypto researchers |
Cryptocurrency |
BleepingComputer |
16.11.23 |
IPStorm botnet with 23,000 proxies for malicious traffic dismantled |
BotNet |
BleepingComputer |
16.11.23 |
WP Fastest Cache plugin bug exposes 600K WordPress sites to attacks |
Hack |
BleepingComputer |
16.11.23 |
New Reptar CPU flaw impacts Intel desktop and server systems |
Vulnerebility |
BleepingComputer |
16.11.23 |
VMware discloses critical VCD Appliance auth bypass with no patch |
Vulnerebility |
BleepingComputer |
16.11.23 |
New CacheWarp AMD CPU attack lets hackers gain root in Linux VMs |
Attack |
BleepingComputer |
16.11.23 |
LockBit ransomware exploits Citrix Bleed in attacks, 10K servers exposed |
Ransom |
BleepingComputer |
16.11.23 |
Microsoft November 2023 Patch Tuesday fixes 5 zero-days, 58 flaws |
OS |
BleepingComputer |
16.11.23 |
Microsoft fixes critical Azure CLI flaw that leaked credentials in logs |
OS |
BleepingComputer |
16.11.23 |
Windows 11 KB5032190 update enables Moment 4 features for everyone |
OS |
BleepingComputer |
16.11.23 |
Windows 10 KB5032189 update released with 11 improvements |
OS |
BleepingComputer |
16.11.23 |
Pharmacy provider Truepill data breach hits 2.3 million customers |
Incindent |
BleepingComputer |
16.11.23 |
Meet the Unique New "Hacking" Group: AlphaLock |
Hack |
BleepingComputer |
16.11.23 |
CISA and FBI Issue Warning About Rhysida Ransomware Double Extortion Attacks |
Ransom |
The Hacker News |
16.11.23 |
Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks |
Ransom |
The Hacker News |
16.11.23 |
Russian Hackers Linked to 'Largest Ever Cyber Attack' on Danish Critical Infrastructure |
BigBrothers |
The Hacker News |
16.11.23 |
U.S. Takes Down IPStorm Botnet, Russian-Moldovan Mastermind Pleads Guilty |
BigBrothers |
The Hacker News |
16.11.23 |
New PoC Exploit for Apache ActiveMQ Flaw Could Let Attackers Fly Under the Radar |
Vulnerebility |
The Hacker News |
16.11.23 |
The Importance of Continuous Security Monitoring for a Robust Cybersecurity Strategy |
Cyber |
The Hacker News |
15.11.23 |
In-Depth Analysis of July 2023 Exploit Chain Featuring CVE-2023-36884 and CVE-2023-36584 |
Exploit blog |
Palo Alto |
15.11.23 |
High Traffic + High Vulnerability = an Attractive Target for Criminals: The Dangers of Viewing Clickbait Sites |
Vulnerebility blog |
Palo Alto |
15.11.23 |
Chinese APT Targeting Cambodian Government |
APT blog |
Palo Alto |
15.11.23 |
Agonizing Serpens (Aka Agrius) Targeting the Israeli Higher Education and Tech Sectors |
BigBrother blog |
Palo Alto |
15.11.23 |
GPT VS MALWARE ANALYSIS: CHALLENGES AND MITIGATIONS |
Malware blog |
Checkpoint |
15.11.23 |
ABUSING MICROSOFT ACCESS “LINKED TABLE” FEATURE TO PERFORM NTLM FORCED AUTHENTICATION ATTACKS |
Attack blog |
Checkpoint |
15.11.23 |
Level up! These games will make learning about cybersecurity fun |
Cyber blog |
Eset |
15.11.23 |
Capture The Flag: 5 websites to sharpen your hacking skills |
Hacking blog |
Eset |
15.11.23 |
Spyware disguised as a news app – Week in security with Tony Anscombe |
Malware blog |
Eset |
15.11.23 |
Cyber threat intelligence: Getting on the front foot against adversaries |
Cyber blog |
Eset |
15.11.23 |
Unlucky Kamran: Android malware spying on Urdu-speaking residents of Gilgit-Baltistan |
OS Blog |
Eset |
15.11.23 |
Navigating the security and privacy challenges of large language models |
Security blog |
Eset |
14.11.23 |
Ethereum feature abused to steal $60 million from 99K victims |
Cryptocurrency |
BleepingComputer |
14.11.23 |
FBI: Royal ransomware asked 350 victims to pay $275 million |
Ransom |
BleepingComputer |
14.11.23 |
DP World cyberattack blocks thousands of containers in ports |
Cyber |
BleepingComputer |
14.11.23 |
CISA warns of actively exploited Juniper pre-auth RCE exploit chain |
Exploit |
BleepingComputer |
14.11.23 |
Israel warns of BiBi wiper attacks targeting Linux and Windows |
Virus |
BleepingComputer |
14.11.23 |
Criminal IP & Cisco SecureX/XDR: Enhanced Cyber Threat Analysis |
Cyber |
BleepingComputer |
14.11.23 |
LockBit ransomware leaks gigabytes of Boeing data |
Ransom |
BleepingComputer |
14.11.23 |
Windows 11 will soon let you uninstall more inbox apps |
OS |
BleepingComputer |
14.11.23 |
Iranian hackers launch malware attacks on Israel’s tech sector |
Virus |
BleepingComputer |
14.11.23 |
The Importance of Continuous Security Monitoring for a Robust Cybersecurity Strategy |
Cyber |
The Hacker News |
14.11.23 |
Alert: OracleIV DDoS Botnet Targets Public Docker Engine APIs to Hijack Containers |
BotNet |
The Hacker News |
14.11.23 |
New Campaign Targets Middle East Governments with IronWind Malware |
Virus |
The Hacker News |
14.11.23 |
Vietnamese Hackers Using New Delphi-Powered Malware to Target Indian Marketers |
Virus |
The Hacker News |
14.11.23 |
CISA Sets a Deadline - Patch Juniper Junos OS Flaws Before November 17 |
OS |
The Hacker News |
14.11.23 |
New Ransomware Group Emerges with Hive's Source Code and Infrastructure |
Ransom |
The Hacker News |
13.11.23 |
Chinese Hackers Launch Covert Espionage Attacks on 24 Cambodian Organizations |
BigBrothers |
The Hacker News |
13.11.23 |
Major Phishing-as-a-Service Syndicate 'BulletProofLink' Dismantled by Malaysian Authorities |
Phishing |
The Hacker News |
13.11.23 |
New BiBi-Windows Wiper Targets Windows Systems in Pro-Hamas Attacks |
Virus |
The Hacker News |
12.11.23 |
Police takes down BulletProftLink large-scale phishing provider |
Phishing |
BleepingComputer |
12.11.23 |
Microsoft fixes Outlook bug causing attachment saving issues |
OS |
BleepingComputer |
12.11.23 |
Mortgage giant Mr. Cooper says customer data exposed in breach |
Incindent |
BleepingComputer |
12.11.23 |
Microsoft: BlueNoroff hackers plan new crypto-theft attacks |
Attack |
BleepingComputer |
12.11.23 |
Hackers breach healthcare orgs via ScreenConnect remote access |
Incindent |
BleepingComputer |
12.11.23 |
Microsoft extends Windows Server 2012 ESUs to October 2026 |
OS |
BleepingComputer |
12.11.23 |
Maine govt notifies 1.3 million people of MOVEit data breach |
Incindent |
BleepingComputer |
12.11.23 |
McLaren Health Care says data breach impacted 2.2 million people |
Incindent |
BleepingComputer |
12.11.23 |
Kyocera AVX says ransomware attack impacted 39,000 individuals |
Ransom |
BleepingComputer |
12.11.23 |
Cloudflare website downed by DDoS attack claimed by Anonymous Sudan |
Attack |
BleepingComputer |
12.11.23 |
World’s largest commercial bank ICBC confirms ransomware attack |
Ransom |
BleepingComputer |
12.11.23 |
Microsoft shares temp fix for broken Windows Server 2022 VMs |
OS |
BleepingComputer |
12.11.23 |
Google ads push malicious CPU-Z app from fake Windows news site |
Virus |
BleepingComputer |
12.11.23 |
Microsoft: SysAid zero-day flaw exploited in Clop ransomware attacks |
Ransom |
BleepingComputer |
12.11.23 |
Russian hackers switch to LOTL technique to cause power outage |
BigBrothers |
BleepingComputer |
12.11.23 |
OpenAI confirms DDoS attacks behind ongoing ChatGPT outages |
AI |
BleepingComputer |
12.11.23 |
Microsoft drops SMB1 firewall rules in new Windows 11 build |
OS |
BleepingComputer |
12.11.23 |
Sumo Logic discloses security breach, advises API key resets |
Incindent |
BleepingComputer |
12.11.23 |
Russian state-owned Sberbank hit by 1 million RPS DDoS attack |
Attack |
BleepingComputer |
12.11.23 |
FBI: Ransomware gangs hack casinos via 3rd party gaming vendors |
Ransom |
BleepingComputer |
12.11.23 |
Microsoft Warns of Fake Skills Assessment Portals Targeting IT Job Seekers |
Apple |
The Hacker News |
11.11.23 |
Russian Hackers Sandworm Cause Power Outage in Ukraine Amidst Missile Strikes |
APT |
The Hacker News |
11.11.23 |
Alert: 'Effluence' Backdoor Persists Despite Patching Atlassian Confluence Servers |
Virus |
The Hacker News |
11.11.23 |
Iran-Linked Imperial Kitten Cyber Group Targeting Middle East's Tech Sectors |
APT |
The Hacker News |
10.11.23 |
ChatGPT down after major outage impacting OpenAI systems |
AI |
BleepingComputer |
10.11.23 |
WhatsApp now lets users hide their location during calls |
Social |
BleepingComputer |
10.11.23 |
Russian-speaking threat actor "farnetwork" linked to 5 ransomware gangs |
Ransom |
BleepingComputer |
10.11.23 |
TransForm says ransomware data breach affects 267,000 patients |
Ransom |
BleepingComputer |
10.11.23 |
Fake Ledger Live app in Microsoft Store steals $768,000 in crypto |
Incindent |
BleepingComputer |
10.11.23 |
BlueNoroff hackers backdoor Macs with new ObjCShellz malware |
Virus |
BleepingComputer |
10.11.23 |
Microsoft: Some Outlook.com users can't send emails with attachments |
Security |
BleepingComputer |
10.11.23 |
Microsoft Authenticator now blocks suspicious MFA alerts by default |
Security |
BleepingComputer |
10.11.23 |
Marina Bay Sands discloses data breach impacting 665,000 customers |
Incindent |
BleepingComputer |
10.11.23 |
Veeam warns of critical bugs in Veeam ONE monitoring platform |
Vulnerebility |
BleepingComputer |
10.11.23 |
Hackers exploit Looney Tunables Linux bug, steal cloud creds |
Exploit |
BleepingComputer |
10.11.23 |
Microsoft will roll out MFA-enforcing policies for admin portal access |
Security |
BleepingComputer |
10.11.23 |
Critical Atlassian Confluence bug exploited in Cerber ransomware attacks |
Ransom |
BleepingComputer |
10.11.23 |
US sanctions Russian who laundered money for Ryuk ransomware affiliate |
Ransom |
BleepingComputer |
10.11.23 |
TellYouThePass ransomware joins Apache ActiveMQ RCE attacks |
Ransom |
BleepingComputer |
10.11.23 |
Stealthy Kamran Spyware Targeting Urdu-speaking Users in Gilgit-Baltistan |
Virus |
The Hacker News |
10.11.23 |
Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability |
Exploit |
The Hacker News |
10.11.23 |
New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers |
Virus |
The Hacker News |
10.11.23 |
MuddyC2Go: New C2 Framework Iranian Hackers Using Against Israel |
APT |
The Hacker News |
9.11.23 |
CISA Alerts: High-Severity SLP Vulnerability Now Under Active Exploitation |
Exploit |
The Hacker News |
9.11.23 |
Researchers Uncover Undetectable Crypto Mining Technique on Azure Automation |
Cryptocurrency |
The Hacker News |
9.11.23 |
WhatsApp Introduces New Privacy Feature to Protect IP Address in Calls |
Social |
The Hacker News |
9.11.23 |
Beware, Developers: BlazeStealer Malware Discovered in Python Packages on PyPI |
Virus |
The Hacker News |
9.11.23 |
Experts Expose Farnetwork's Ransomware-as-a-Service Business Model |
Ransom |
The Hacker News |
8.11.23 |
N. Korea's BlueNoroff Blamed for Hacking macOS Machines with ObjCShellz Malware |
Virus |
The Hacker News |
8.11.23 |
New GootLoader Malware Variant Evades Detection and Spreads Rapidly |
Virus |
The Hacker News |
8.11.23 |
Offensive and Defensive AI: Let's Chat(GPT) About It |
AI |
The Hacker News |
8.11.23 |
SideCopy Exploiting WinRAR Flaw in Attacks Targeting Indian Government Entities |
Virus |
The Hacker News |
7.11.23 |
Experts Warn of Ransomware Hackers Exploiting Atlassian and Apache Flaws |
Ransom |
The Hacker News |
7.11.23 |
Critical Flaws Discovered in Veeam ONE IT Monitoring Software – Patch Now |
Vulnerebility |
The Hacker News |
7.11.23 |
New Jupyter Infostealer Version Emerges with Sophisticated Stealth Tactics |
Virus |
The Hacker News |
7.11.23 |
QNAP Releases Patch for 2 Critical Flaws Threatening Your NAS Devices |
Vulnerebility |
The Hacker News |
6.11.23 |
SecuriDropper: New Android Dropper-as-a-Service Bypasses Google's Defenses |
Android |
The Hacker News |
6.11.23 |
QNAP warns of critical command injection flaws in QTS OS, apps |
Vulnerebility |
BleepingComputer |
6.11.23 |
Cybercrime service bypasses Android security to install malware |
Android |
BleepingComputer |
6.11.23 |
Socks5Systemz proxy service infects 10,000 systems worldwide |
BotNet |
BleepingComputer |
6.11.23 |
Discord will switch to temporary file links to block malware delivery |
Virus |
BleepingComputer |
6.11.23 |
Apple 'Find My' network can be abused to steal keylogged passwords |
Apple |
BleepingComputer |
6.11.23 |
Iranian Hackers Launches Destructive Cyberattacks on Israeli Tech and Education Sectors |
BigBrothers |
The Hacker News |
6.11.23 |
Google Warns How Hackers Could Abuse Calendar Service as a Covert C2 Channel |
Hack |
The Hacker News |
6.11.23 |
U.S. Treasury Sanctions Russian Money Launderer in Cybercrime Crackdown |
BigBrothers |
The Hacker News |
4.11.23 |
Threat Brief: Citrix Bleed CVE-2023-4966 |
Vulnerebility blog |
Palo Alto |
4.11.23 |
Conducting Robust Learning for Empire Command and Control Detection |
Safety blog |
Palo Alto |
4.11.23 |
Over the Kazuar’s Nest: Cracking Down on a Freshly Hatched Backdoor Used by Pensive Ursa (Aka Turla) |
Malware blog |
Palo Alto |
4.11.23 |
CloudKeys in the Air: Tracking Malicious Operations of Exposed IAM Keys |
Malware blog |
Palo Alto |
4.11.23 |
BlackCat Climbs the Summit With a New Tactic |
Ransom blog |
Palo Alto |
4.11.23 |
FROM ALBANIA TO THE MIDDLE EAST: THE SCARRED MANTICORE IS LISTENING |
BigBrother blog |
Checkpoint |
4.11.23 |
Arid Viper disguising mobile spyware as updates for non-malicious Android applications |
OS Blog |
Cisco Blog |
4.11.23 |
Attackers use JavaScript URLs, API forms and more to scam users in popular online game “Roblox” |
Spam blog |
Cisco Blog |
4.11.23 |
Kazakhstan-associated YoroTrooper disguises origin of attacks as Azerbaijan |
BigBrother blog |
Cisco Blog |
4.11.23 |
The mysterious demise of the Mozi botnet – Week in security with Tony Anscombe |
BotNet blog |
Eset |
4.11.23 |
Who killed Mozi? Finally putting the IoT zombie botnet in its grave |
BotNet blog |
Eset |
4.11.23 |
Closing the gender gap: 7 ways to attract more women into cybersecurity |
Cyber blog |
Eset |
4.11.23 |
20 scary cybersecurity facts and figures for a haunting Halloween |
Security blog |
Eset |
4.11.23 |
Roundcube Webmail servers under attack – Week in security with Tony Anscombe |
Attack blog |
Eset |
4.11.23 |
ESET APT Activity Report Q2–Q3 2023 |
APT blog |
Eset |
4.11.23 |
Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers |
Exploit blog |
Eset |
4.11.23 |
One login to rule them all: Should you sign in with Google or Facebook on other websites? |
Social blog |
Eset |
|
4.11.23 |
The Week in Ransomware - November 3rd 2023 - Hive's Back |
Ransom |
BleepingComputer |
|
4.11.23 |
Dutch hacker jailed for extortion, selling stolen data on RaidForums |
CyberCrime |
BleepingComputer |
|
4.11.23 |
American Airlines pilot union hit by ransomware attack |
Ransom |
BleepingComputer |
|
4.11.23 |
Google Play adds security audit badges for Android VPN apps |
Android |
BleepingComputer |
|
4.11.23 |
New Microsoft Exchange zero-days allow RCE, data theft attacks |
Exploit |
BleepingComputer |
|
4.11.23 |
StripedFly Malware Operated Unnoticed for 5 Years, Infecting 1 Million Devices |
Virus |
The Hacker News |
|
4.11.23 |
Okta's Recent Customer Support Data Breach Impacted 134 Customers |
Incindent |
The Hacker News |
|
4.11.23 |
Google Play Store Introduces 'Independent Security Review' Badge for Apps |
Android |
The Hacker News |
|
4.11.23 |
Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments |
Vulnerebility |
The Hacker News |
|
3.11.23 |
Okta breach: 134 customers exposed in October support system hack |
Incindent |
BleepingComputer |
|
3.11.23 |
Atlassian warns of exploit for Confluence data wiping bug, get patching |
Exploit |
BleepingComputer |
|
3.11.23 |
Ace Hardware says 1,202 devices were hit during cyberattack |
Attack |
BleepingComputer |
|
3.11.23 |
New macOS 'KandyKorn' malware targets cryptocurrency engineers |
Apple |
BleepingComputer |
|
3.11.23 |
BlackCat ransomware claims breach of healthcare giant Henry Schein |
Ransom |
BleepingComputer |
|
3.11.23 |
Mortgage giant Mr. Cooper hit by cyberattack impacting IT systems |
Attack |
BleepingComputer |
|
3.11.23 |
HelloKitty ransomware now exploiting Apache ActiveMQ flaw in attacks |
Ransom |
BleepingComputer |
|
3.11.23 |
Cloudflare Dashboard and APIs down after data center power outage |
Security |
BleepingComputer |
|
3.11.23 |
Boeing confirms cyberattack amid LockBit ransomware claims |
Ransom |
BleepingComputer |
|
3.11.23 |
Microsoft pledges to bolster security as part of ‘Secure Future’ initiative |
OS |
BleepingComputer |
|
3.11.23 |
Okta hit by third-party data breach exposing employee information |
Incindent |
BleepingComputer |
|
3.11.23 |
FSB arrests Russian hackers working for Ukrainian cyber forces |
BigBrothers |
BleepingComputer |
|
3.11.23 |
Toronto Public Library outages caused by Black Basta ransomware attack |
Ransom |
BleepingComputer |
|
3.11.23 |
New CVSS 4.0 vulnerability severity rating standard released |
Security |
BleepingComputer |
|
3.11.23 |
Hackers use Citrix Bleed flaw in attacks on govt networks worldwide |
BigBrothers |
BleepingComputer |
|
3.11.23 |
3,000 Apache ActiveMQ servers vulnerable to RCE attacks exposed online |
Exploit |
BleepingComputer |
|
3.11.23 |
Microsoft: Windows Copilot makes desktop icons jump between displays |
OS |
BleepingComputer |
|
3.11.23 |
Mozi malware botnet goes dark after mysterious use of kill-switch |
BotNet |
BleepingComputer |
|
3.11.23 |
Hackers exploit recent F5 BIG-IP flaws in stealthy attacks |
Exploit |
BleepingComputer |
|
3.11.23 |
LayerX Enterprise Browser Security Extension – Secure the Modern Workspace |
Security |
BleepingComputer |
|
3.11.23 |
Avast confirms it tagged Google app as malware on Android phones |
Android |
BleepingComputer |
|
3.11.23 |
Flipper Zero Bluetooth spam attacks ported to new Android app |
Android |
BleepingComputer |
|
3.11.23 |
Windows 11 23H2 - New features in the Windows 11 2023 Update |
OS |
BleepingComputer |
|
3.11.23 |
How to download a Windows 11 23H2 ISO from Microsoft |
OS |
BleepingComputer |
|
3.11.23 |
British Library knocked offline by weekend cyberattack |
CyberCrime |
BleepingComputer |
|
3.11.23 |
Atlassian warns of critical Confluence flaw leading to data loss |
Vulnerebility |
BleepingComputer |
|
3.11.23 |
Microsoft releases Windows 11 23H2 as an enablement package |
OS |
BleepingComputer |
|
3.11.23 |
Dozens of countries will pledge to stop paying ransomware gangs |
Ransom |
BleepingComputer |
|
3.11.23 |
Samsung Galaxy gets new Auto Blocker anti-malware feature |
Safety |
BleepingComputer |
|
3.11.23 |
Massive cybercrime URL shortening service uncovered via DNS data |
CyberCrime |
BleepingComputer |
|
3.11.23 |
Canada bans WeChat and Kaspersky products on govt devices |
BigBrothers |
BleepingComputer |
|
3.11.23 |
Malicious NuGet packages abuse MSBuild to install malware |
Virus |
BleepingComputer |
|
3.11.23 |
NodeStealer Malware Hijacking Facebook Business Accounts for Malicious Ads |
Virus |
The Hacker News |
|
3.11.23 |
Predictive AI in Cybersecurity: Outcomes Demonstrate All AI is Not Created Equally |
AI |
The Hacker News |
|
3.11.23 |
CanesSpy Spyware Discovered in Modified WhatsApp Versions |
Virus |
The Hacker News |
|
3.11.23 |
48 Malicious npm Packages Found Deploying Reverse Shells on Developer Systems |
Virus |
The Hacker News |
|
2.11.23 |
Mysterious Kill Switch Disrupts Mozi IoT Botnet Operations |
BotNet |
The Hacker News |
|
2.11.23 |
Iran's MuddyWater Targets Israel in New Spear-Phishing Cyber Campaign |
BigBrothers |
The Hacker News |
|
2.11.23 |
Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover |
Vulnerebility |
The Hacker News |
|
2.11.23 |
FIRST Announces CVSS 4.0 - New Vulnerability Scoring System |
Security |
The Hacker News |
|
2.11.23 |
HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability |
Ransom |
The Hacker News |
|
2.11.23 |
Researchers Expose Prolific Puma's Underground Link Shortening Service |
Hack |
The Hacker News |
|
1.11.23 |
Iranian Cyber Espionage Group Targets Financial and Government Sectors in Middle East |
BigBrothers |
The Hacker News |
|
1.11.23 |
North Korean Hackers Targeting Crypto Experts with KANDYKORN macOS Malware |
Apple |
The Hacker News |
|
1.11.23 |
Turla Updates Kazuar Backdoor with Advanced Anti-Analysis to Evade Detection |
APT |
The Hacker News |
|
1.11.23 |
Alert: F5 Warns of Active Attacks Exploiting BIG-IP Vulnerability |
Vulnerebility |
The Hacker News |
|
1.11.23 |
Arid Viper Targeting Arabic Android Users with Spyware Disguised as Dating App |
Android |
The Hacker News |
| | | |