Security news that informs and inspires

All Articles

2376 articles:

CISA: LockBit Most Active Ransomware Group

The LockBit ransomware group was the most active in the world last year, according to a new advisory, and has collected nearly $100 million in ransoms in three years.

Ransomware, CISA

Cyberespionage Group Targets New VMware Zero Day

A Chinese cyberespionage group known as UNC3886 has been exploiting a new zero day (CVE-2023-20867) in VMware Tools.

Vmware

Fortinet Patches New Critical FortiOS Bug

Fortinet has released new firmware updates to patch a remote code execution vulnerability (CVE-2023-27997) that affects all versions of the FortiGate appliance.

Fortinet

U.S. Nuclear Agency in ‘Early Stages’ of Addressing Security Risks

According to a watchdog report, the National Nuclear Security Administration is still in the "early stages" of fully implementing security measures across its operational technology (OT) and nuclear weapons IT environments.

Nuclear, OT, Operational Technology

Russian Nationals Charged in Mt. Gox Crypto Exchange Hack

The DoJ unsealed the indictment charging two Russian nationals with gaining unauthorized access to the Mt. Gox server in 2011.

Cryptocurrency

Decipher Podcast: Source Code 6/9

Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.

Source Code, Podcast

Barracuda: ESG Appliances With Actively Exploited Flaw Must Be Replaced

After deploying two patches, Barracuda said that businesses impacted by an actively exploited flaw must immediately replace their ESG appliances.

Email, Exploit, Flaw

New BEC Campaign Targets Financial Companies

A newly identified phishing and BEC campaign is targeting banks and financial organizations and began with the compromise of a trusted vendor.

BEC, Phishing

VMware Fixes Critical Network Monitoring Tool Flaws

Several versions of VMware's network monitoring tool have flaws that could enable an attacker with existing network access to remotely execute code.

Vmware

MOVEit Bug Attacks Continue By Cl0p Ransomware Group, Other Actors

The MOVEit Transfer bug that researchers say allows remote code execution, is being exploited by the Cl0p ransomware group and other actors to steal data and deploy ransomware.

Moveit

Google Patches Type Confusion Zero Day in Chrome

The type confusion bug is the third zero day that Google has addressed this year.

Zero Day, Google, Google Chrome

Apple Enables Third-Party Management for Passkeys

In upcoming software releases, Apple will change the way passkeys are managed, allowing third-party apps to sync and share them.

Apple

North Korean Attackers Target Google Account Credentials

The North Korean Kimsuky group has targeted think tanks, academic institutions and news media organizations in order to steal their credentials and gather intelligence.

Kimsuky, North Korea

UNC4857 Exploits MOVEit Transfer Flaw in Data Extortion Attacks

Threat actors continue to target the critical-severity file transfer bug to launch data exfiltration attacks, and researchers say organizations should potentially expect ransom emails in the coming weeks.

Zero Day, Exploit

MOVEit Transfer Zero Day Under Attack

A critical zero day flaw in all version of MOVEit Transfer is under active attack by multiple threat actors.

Vulnerability, Zero Day