Security Intelligence
Oracle patches over 300 vulnerabilities in annual multi-product update
Oracle releases updates for over 300 vulnerabilities affecting many of its products and services.
Security Intelligence
Microsoft Teams abused by Black Basta affiliates
Separate threat actors abuse Microsoft Teams to initiate chats and meetings with internal users to deploy malware.
Security Intelligence
U.S. issues sanctions for attack on Treasury and communications providers
The U.S. Treasury sanctions Chinese cybersecurity company and a Shanghai-based individual for their involvement in a...
Security Intelligence
Russian hackers target Ukrainian WhatsApp accounts in clever campaign
FSB observed impersonating U.S. government officials to gain access to WhatsApp accounts belonging to Ukrainians.
Security Intelligence
Six vulnerabilities found in Rsync file synchronization tool
Vulnerabilities discovered in popular file synchronization tool Rsync that could lead to remote code execution.
Security Intelligence
U.S. Treasury sanctions North Korea’s IT warriors
The U.S. Treasury imposes sanctions on two individuals and four entities linked to fraudulent North Korean IT workers...
Security Intelligence
Fortinet fiasco: Rookie threat actor leaks creds for 15,000 devices
The Belsen Group has leaks configuration files, IP addresses, and VPN credentials for over 15,000 Fortinet devices.
Security Intelligence
FBI ‘unplugs’ Chinese malware from thousands of infected machines
FBI successfully concludes court-authorized operation to delete PlugX malware from 4,250 infected hosts.
Security Intelligence
‘Codefinger’ encrypts S3 buckets using AWS’s own encryption feature
Codefinger encrypts Amazon S3 buckets and demands a ransom in exchange for the decryption key.
Security Intelligence
Russian ISP Nodex destroyed by pro-Ukraine hackers
Network of Russian ISP Nodex destroyed by pro-Ukraine hackers.
Security Intelligence
Palo Alto patches vulnerabilities in Expedition migration tool
Palo Alto releases patches to address multiple vulnerabilities recently discovered in its Expedition tool.
Security Intelligence
Zero-day vulnerability in Ivanti Connect Secure actively exploited
Ivanti reports threat actors actively exploiting a zero-day vulnerability in its Connect Secure remote access solution.