The U.S. Federal Bureau of Investigation (FBI) has disclosed that it’s in possession of more than 7,000 decryption keys associated with the LockBit ransomware operation to help victims get their… Read More »FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks targeting defense forces in the country with a malware called SPECTR as part of an espionage campaign… Read More »SPECTR Malware Targets Ukraine Defense Forces in SickSync Campaign
The threat actor known as Commando Cat has been linked to an ongoing cryptojacking attack campaign that leverages poorly secured Docker instances to deploy cryptocurrency miners for financial gain. “The… Read More »Commando Cat Cryptojacking Attacks Target Misconfigured Docker Instances
The distributed denial-of-service (DDoS) botnet known as Muhstik has been observed leveraging a now-patched security flaw impacting Apache RocketMQ to co-opt susceptible servers and expand its scale. “Muhstik is a… Read More »Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks
Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill’s threat experts. Each story shines a light on underground activities, the threat actors… Read More »Third-Party Cyber Attacks: The Threat No One Sees Coming – Here’s How to Stop Them
Threat actors are increasingly abusing legitimate and commercially available packer software such as BoxedApp to evade detection and distribute malware such as remote access trojans and information stealers. “The majority… Read More »Hackers Exploit Legitimate Packer Software to Spread Malware Undetected
Tom works for a reputable financial institution. He has a long, complex password that would be near-impossible to guess. He’s memorized it by heart, so he started using it for… Read More »Prevent Account Takeover with Better Password Security
Google has announced plans to store Maps Timeline data locally on users’ devices instead of their Google account effective December 1, 2024. The changes were originally announced by the tech… Read More »Google Maps Timeline Data to be Stored Locally on Your Device for Privacy
Cybersecurity researchers have discovered a malicious Python package uploaded to the Python Package Index (PyPI) repository that’s designed to deliver an information stealer called Lumma (aka LummaC2). The package in… Read More »Hackers Target Python Developers with Fake “Crytic-Compilers” Package on PyPI
Early in 2024, Wing Security released its State of SaaS Security report, offering surprising insights into emerging threats and best practices in the SaaS domain. Now, halfway through the year,… Read More »Unpacking 2024’s SaaS Threat Predictions