Security news that informs and inspires

All Articles

2376 articles:

New Attack Group Focuses on Asian Medical and Shipping Companies

A newly identified attack group known as Hydrochasma has targted medical and shipping companies in Asia with spear phishing campaigns that use freely available tools.

Phishing

Fortinet Fixes Critical Flaw in FortiNAC

Fortinet has patched a critical remote code execution bug in its FortiNAC product.

Fortinet

Critical RCE Bug Fixed in ClamAV

A critical remote code execution vulnerability has been fixed in the ClamAV anti-malware engine.

Vulnerability

Q&A: J Wolfgang Goerlich

J Wolfgang Goerlich, Advisory CISO for Cisco Security, talks about why relationships are so important for CISOs when interacting with organizational leadership teams.

CISO Q&a

ESXiArgs Ransomware Infections Spike

A new spike in ESXiArgs ransomware infections has emerged in the last couple of days, targeting servers in the UK and Europe.

Vmware, Ransomware

Microsoft Patches Three Actively Exploited Bugs

In its February patch release, Microsoft fixed three vulnerabilities in Windows that have been actively exploited.

Microsoft

CISA Warns of Ongoing Ransomware Attacks by North Korean Actors

CISA, the FBI, and NSA are warning about ongoing ransomware attacks by North Korean groups that target government agencies and defense companies.

North Korea, Ransomware

‘We Are at the Time’s Up Phase for Industrial Security’

New data from Dragos shows that ransomware attacks against ICS systems are increasing, and sophisticated malware designed for those environments is now a reality.

Ransomware, ICS

Attacker Accessed Some Reddit Code, Business Systems

A phishing attack allowed an attacker to steal a Reddit employee's credentials and gain access to some internal company systems last week.

2fa

U.S., U.K. Governments Sanction Alleged Members of Trickbot Malware Group

The U.S. and U.K. governments have sanctioned seven Russian men whom they allege are members of the Trickbot cybercrime group.

Ransomware, Russia

Fortra Patches Actively Exploited Zero Day in GoAnywhere MFT

Fortra has released version 7.12 of its GoAnywhere mFT file transfer tool to fix a zero day that has been under active attack.

Zero Day

OpenSSL Fixes Serious Issue That Could Lead to Memory Disclosure

New versions of OpenSSL fix several vulnerabilities, including one high-severity bug that could lead to memory disclosure.

Openssl

Ransomware Targets VMware ESXi Flaw

A wave of ransomware attacks is targeting VMware ESXi servers that are vulnerable to CVE-2021-21974.

Vmware, Ransomware

Linux Variant of Cl0p Ransomware Emerges

A Linux version of the Cl0p ransomware has been identified, but it has a flaw in its encryption routine that allowed researchers to build a decryptor for it.

Ransomware, Cl0p

Q&A: Wendy Nather

Wendy Nather, who leads the Advisory CISO team at Cisco, talks about the shift of security from a control organization to a service organization.

CISO Q&a