A previously undocumented advanced persistent threat (APT) group dubbed CloudSorcerer has been observed targeting Russian government entities by leveraging cloud services for command-and-control (C2) and data exfiltration. Cybersecurity firm Kaspersky,… Read More »New APT Group “CloudSorcerer” Targets Russian Government Entities
Events like the recent massive CDK ransomware attack – which shuttered car dealerships across the U.S. in late June 2024 – barely raise public eyebrows anymore. Yet businesses, and the… Read More »5 Key Questions CISOs Must Ask Themselves About Their Cybersecurity Strategy
Financial institutions in Latin America are being threatened by a banking trojan called Mekotio (aka Melcoz). That’s according to findings from Trend Micro, which said it recently observed a surge… Read More »Experts Warn of Mekotio Banking Trojan Targeting Latin American Countries
Four unpatched security flaws, including three critical ones, have been disclosed in the Gogs open-source, self-hosted Git service that could enable an authenticated attacker to breach susceptible instances, steal or… Read More »Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service
Apple removed a number of virtual private network (VPN) apps in Russia from its App Store on July 4, 2024, following a request by Russia’s state communications watchdog Roskomnadzor, Russian… Read More »Apple Removes VPN Apps from Russian App Store Amid Government Pressure
French cloud computing firm OVHcloud said it mitigated a record-breaking distributed denial-of-service (DDoS) attack in April 2024 that reached a packet rate of 840 million packets per second (Mpps). This… Read More »OVHcloud Hit with Record 840 Million PPS DDoS Attack Using MikroTik Routers
Identity theft isn’t just about stolen credit cards anymore. Today, cybercriminals are using advanced tactics to infiltrate organizations and cause major damage with compromised credentials. The stakes are high: ransomware… Read More »Webinar Alert: Learn How ITDR Solutions Stop Sophisticated Identity Attacks
The attack surface isn’t what it once was and it’s becoming a nightmare to protect. A constantly expanding and evolving attack surface means risk to the business has skyrocketed and… Read More »Blueprint for Success: Implementing a CTEM Operation
The malware known as GootLoader continues to be in active use by threat actors looking to deliver additional payloads to compromised hosts. “Updates to the GootLoader payload have resulted in… Read More »GootLoader Malware Still Active, Deploys New Versions for Enhanced Attacks
Cybersecurity researchers have uncovered a new botnet called Zergeca that’s capable of conducting distributed denial-of-service (DDoS) attacks. Written in Golang, the botnet is so named for its reference to a… Read More »New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks