Cybersecurity researchers have discovered that the malware known as BLOODALCHEMY used in attacks targeting government organizations in Southern and Southeastern Asia is in fact an updated version of Deed RAT, which is believed to… Read More »Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies
Malicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver malware that’s associated with a known backdoor called RustDoor. The… Read More »Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting Apache Flink, the open-source, unified stream-processing and batch-processing framework, to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence… Read More »CISA Warns of Actively Exploited Apache Flink Security Vulnerability
Ransomware attacks targeting VMware ESXi infrastructure following an established pattern regardless of the file-encrypting malware deployed. “Virtualization platforms are a core component of organizational IT infrastructure, yet they often suffer from inherent… Read More »Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern
The China-linked threat actor known as Sharp Panda has expanded their targeting to include governmental organizations in Africa and the Caribbean as part of an ongoing cyber espionage campaign. “The… Read More »New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts
Governmental entities in the Middle East, Africa, and Asia are the target of a Chinese advanced persistent threat (APT) group as part of an ongoing cyber espionage campaign dubbed Operation Diplomatic… Read More »Inside Operation Diplomatic Specter: Chinese APT Group’s Stealthy Tactics Exposed
Conversations about data security tend to diverge into three main threads: How can we protect the data we store on our on-premises or cloud infrastructure? What strategies and tools or… Read More »Are Your SaaS Backups as Secure as Your Production Data?
Ivanti on Tuesday rolled out fixes to address multiple critical security flaws in Endpoint Manager (EPM) that could be exploited to achieve remote code execution under certain circumstances. Six of… Read More »Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager
Microsoft on Wednesday outlined its plans to deprecate Visual Basic Script (VBScript) in the second half of 2024 in favor of more advanced alternatives such as JavaScript and PowerShell. “Technology… Read More »The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell
Cybersecurity researchers have disclosed details of a previously undocumented threat group called Unfading Sea Haze that’s believed to have been active since 2018. The intrusion singled out high-level organizations in South China… Read More »Researchers Warn of Chinese-Aligned Hackers Targeting South China Sea Countries