The Russian threat actor known as RomCom has been linked to a new wave of cyber attacks aimed at Ukrainian government agencies and unknown Polish entities since at least late… Read More »Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant
Cybersecurity researchers have gleaned additional insights into a nascent ransomware-as-a-service (RaaS) called Cicada3301 after successfully gaining access to the group’s affiliate panel on the dark web. Singapore-headquartered Group-IB said it… Read More »Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program
Federal prosecutors in the U.S. have charged two Sudanese brothers with running a distributed denial-of-service (DDoS) botnet for hire that conducted a record 35,000 DDoS attacks in a single year,… Read More »U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks
An advanced persistent threat (APT) actor with suspected ties to India has sprung forth with a flurry of attacks against high-profile entities and strategic infrastructures in the Middle East and… Read More »SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack
As technology adoption has shifted to be employee-led, just in time, and from any location or device, IT and security teams have found themselves contending with an ever-sprawling SaaS attack… Read More »5 Ways to Reduce SaaS Security Risks
Federal prosecutors in the U.S. have charged two Sudanese brothers with running a distributed denial-of-service (DDoS) botnet for hire that conducted a record 35,000 DDoS attacks in a single year,… Read More »U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks
A critical security flaw has been disclosed in the Kubernetes Image Builder that, if successfully exploited, could be abused to gain root access under certain circumstances. The vulnerability, tracked as… Read More »Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk
Threat actors are attempting to abuse the open-source EDRSilencer tool as part of efforts to tamper endpoint detection and response (EDR) solutions and hide malicious activity. Trend Micro said it… Read More »Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity
The FIDO Alliance said it’s working to make passkeys and other credentials more easier to export across different providers and improve credential provider interoperability, as more than 12 billion online… Read More »FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms
The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devices with malware known as RokRAT.… Read More »North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware