| Date | Title | Description |
| Sign up to see | Sign up to see | Sign up to see |
| Aug 9, 2024 | StormBamboo Compromises ISP, Spreads Malware | New research from cybersecurity company Volexity revealed details about a highly sophisticated attack deployed by a Chinese-speaking cyberespionage threat actor named StormBamboo.
The threat actor compromised an ISP to modify some DNS answe... |
| May 8, 2024 | Трендовые уязвимости апреля: до пяти лет скрытой эксплуатации | Хабр, привет! Я Александр Леонов, ведущий эксперт лаборатории PT Expert Security Center. Мы с командой аналитиков Positive Technologies каждый месяц анализируем информацию об уязвимостях из баз и бюллетеней безопасности вендоров, социальных... |
| Apr 18, 2024 | 10 из 10: в firewall PAN-OS от Palo Alto Networks найдена критическая 0-day-уязвимость. Что происходит? | В сфере информационной безопасности много неожиданностей, а проблемы часто возникают там, где их и не ждали. Сейчас, например, обнаружилось, что файерволлы PAN-OS содержат 0-day-уязвимость, очень серьёзную. Причём появилась она не вчера, а ... |
| Apr 17, 2024 | Palo Alto Networks’ firewall bug under attack brings fresh havoc to thousands of companies | Palo Alto Networks urged companies this week to patch against a newly discovered zero-day vulnerability in one of its widely used security products after malicious hackers began exploiting the bug to break into corporate networks.
The vulne... |
| Apr 12, 2024 | “Highly capable” hackers root corporate networks by exploiting firewall 0-day | Enlarge
Getty Images reader comments 22
Highly capable hackers are rooting multiple corporate networks by exploiting a maximum-severity zero-day vulnerability in a firewall product from Palo Alto Networks, researchers said Friday.
The vulne... |
| Apr 12, 2024 | Palo Alto Networks discloses critical vulnerability in its firewall operating system
Your vote of support is important to us and it helps us keep the content FREE.
One click below supports our mission to provide free, deep, and relevant content.
Join our community on YouTube
Join the community t ... | Palo Alto Networks Inc. today disclosed a vulnerability in its Pan-OS firewall operating system that is being actively targeted by hackers.
The exploit, which is tracked as CVE-2024-3400, has received the highest possible score in the CVSS ... |
| Mar 6, 2024 | Восемь опаснейших уязвимостей февраля 2024 года | Привет друзья! Я Александр Леонов, и вместе с отделом аналитиков Positive Technologies мы подготовили для вас дайджест трендовых уязвимостей за прошедший месяц.
Вы, наверно, сразу спросите: а что это за уязвимости такие — трендовые? Это опа... |
| Mar 1, 2024 | NSA says it’s tracking Ivanti cyberattacks as hackers hit US defense sector | The U.S. National Security Agency has confirmed that hackers exploiting flaws in Ivanti’s widely used enterprise VPN appliance have targeted organizations across the U.S. defense sector.
NSA spokesperson Edward Bennett confirmed in an email... |
| Feb 5, 2024 | Security Week 2406: множество уязвимостей в VPN-сервере Ivanti | 1 февраля компания Ivanti объявила о закрытии нескольких уязвимостей в продуктах Ivanti Connect Secure и Ivanti Policy Secure. Это была бы рутинная новость, если бы не сложности, с которыми столкнулся разработчик этого решения для удаленног... |
| Jan 31, 2024 | Ivanti patches two zero-days under attack, but finds another | Ivanti warned on Wednesday that hackers are exploiting another previously undisclosed zero-day vulnerability affecting its widely used corporate VPN appliance.
Since early December, Chinese state-backed hackers have been exploiting Ivanti... |
| Jan 24, 2024 | Mass exploitation of Ivanti VPNs is infecting networks around the globe | Enlarge / Cybercriminals or anonymous hackers use malware on mobile phones to hack personal and business passwords online.
Getty Images reader comments 21
Hackers suspected of working for the Chinese government are mass exploiting a pair of... |
| Jan 16, 2024 | Hackers begin mass-exploiting Ivanti VPN zero-day flaws | Malicious hackers have begun mass-exploiting two critical zero-day vulnerabilities in Ivanti’s widely used corporate VPN appliance.
That’s according to cybersecurity company Volexity, which first reported last week that China state-backed h... |
| Jan 13, 2024 | Suspected China-backed hackers target unpatched flaws in popular remote work tool | Ivanti, a popular provider of enterprise work tools, confirmed that hackers are actively exploiting critical vulnerabilities in two of its products.
Why it matters: Ivanti has more than 40,000 customers, and attackers are believed to have b... |
| Jan 12, 2024 | Newly Discovered Ivanti Secure VPN Zero-Day Vulnerabilities Allow Chinese Threat Actor to Compromise Systems | Two zero-day vulnerabilities have been discovered in Ivanti Secure VPN, a popular VPN solution used by organizations worldwide. The vulnerabilities are currently being exploited in the wild by at least one Chinese nation-state threat actor ... |
| Jan 11, 2024 | State-backed hackers are exploiting new Ivanti VPN zero-days — but no patches yet | U.S. software giant Ivanti has confirmed that hackers are exploiting two critical-rated vulnerabilities affecting its widely-used corporate VPN appliance, but said that patches won’t be available until the end of the month.
Ivanti said the ... |
| Jan 10, 2024 | Actively exploited 0-days in Ivanti VPN are letting hackers backdoor networks | Enlarge
Getty Images reader comments 7
Unknown threat actors are actively targeting two critical zero-day vulnerabilities that allow them to bypass two-factor authentication and execute malicious code inside networks that use a widely used ... |
| Sep 19, 2023 | Binalyze: Digital Forensics And Incident Response Company Receives $19 Million | Binalyze – a leading provider of cutting-edge Digital Forensics and Incident Response (DFIR) solutions – recently announced it has raised a $19 million Series A round of funding. Molten Ventures led this funding round with participation fro... |
| Apr 7, 2023 | Cyberespionage threat actor APT43 targets US, Europe, Japan and South Korea | Image: Getty Images/iStockphoto/bluebay2014
Security research from Mandiant and Google indicates that targeting by APT43 and its subset Archipelago aligns with North Korean interests.
Jump to:
Who is APT43?
Who does APT43 target?
APT43’s sp... |
| Mar 16, 2023 | Nation state hackers exploited years-old bug to breach a US federal agency | The U.S. government has warned that multiple cybercriminal gangs, including a nation state-backed hacking group, exploited a four-year-old software vulnerability in order to compromise a U.S. federal government agency.
A joint alert release... |
| Mar 16, 2023 | Federal agency hacked by 2 groups thanks to flaw that went unpatched for 4 years | Enlarge
Getty Images reader comments 35 with
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Multiple threat actors—one working on behalf of a nation-state—gained access to the network of a US federal agency by exploitin... |
| Mar 14, 2023 | Cloud incident response nets another $45M with Mitiga’s latest funding | Cloud adoption is on the rise. Just last year, 89% of enterprises migrated data from on-premise storage to the public cloud. And, 84% of organizations expect to increase the amount of data they store in the public cloud in 2023.
This is gre... |
| Dec 8, 2022 | North Korean hackers once again exploit Internet Explorer’s leftover bits | Enlarge / APT37, a group believed to be backed by the North Korean government, has found success exploiting the bits of Internet Explorer still present in various Windows-based apps.
Aurich Lawson | Getty Images reader comments 26 with 0 po... |
| Dec 8, 2022 | North Korean Hackers Used Fake Itaewon Incident Documents Containing Malware to Lure South Korean Victims | John Lopez, Tech Times 08 December 2022, 08:12 am
As first reported by TechCrunch, North Korean hackers are behind an Internet Explorer zero-day vulnerability exploit. This is information that was first made public by Google's Threat Analys... |
| Aug 5, 2022 | North Korean Hackers Are Attacking Gmail Accounts, According To a Cybersecurity Firm | Joaquin Victor Tacla, Tech Times 05 August 2022, 09:08 am
North Korean hackers are now bypassing Google's email security safeguards and can read and download emails and attachments while remaining undetected by Google, as reported first by ... |
| Aug 3, 2022 | North Korea-backed hackers have a clever way to read your Gmail | Enlarge
Getty Images reader comments 77 with 55 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Researchers have unearthed never-before-seen malware that hackers from North Korea have been using to ... |
| Aug 3, 2022 | This Malware Can Access Your Inbox Without Your Password | Your inbox could be at risk, as a new hack has the ability to infiltrate your messages without needing your passwords or your two-factor authentication key.
Login credentials are infamously considered the first line of defense against hacks... |
| Jun 6, 2022 | Security Week 2223: уязвимости в Windows и Atlassian Confluence | Важной новостью прошлой недели стало обнародование информации об уязвимости нулевого дня в подсистеме Microsoft Support Diagnostic Protocol в ОС Windows. Уязвимость, получившая идентификатор CVE-2022-30190 и неофициальное название Follina, ... |
| Jun 3, 2022 | No patch for actively exploited Atlassian Confluence zero-day | All versions of Atlassian's corporate Wiki system, Confluence, are affected by a serious bug under active exploitation, possibly by Chinese threat actors.
Atlassian has confirmed the critical vulnerability in Confluence Server and Data Cent... |
| Jun 3, 2022 | Critical Atlassian 0-day is under active exploit. You’re patched, right? | Enlarge
Getty Images reader comments 50 with 32 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
About this time last week, threat actors began quietly tapping a previously unknown vulnerability in A... |
| Mar 25, 2022 | ТОП-3 ИБ-событий недели по версии Jet CSIRT | Сегодня в подборке новостей Jet CSIRT — кража исходного кода проектов Microsoft, новое ВПО GIMMICK и новый бэкдор Serpent. Новости собирала Мария Волгина, младший аналитик центра мониторинга и реагирования на инциденты ИБ Jet CSIRT компании... |
| Mar 8, 2022 | The Subversive Trilemma in Cyber Conflict and Beyond | In a Lawfare post, Jason Healey provides a thoughtful critique of my recently published theory on the “subversive trilemma.” The key argument I make (summarized here) is that cyber operations are instruments of subversion that hold great st... |
| Feb 9, 2022 | Проникновение в чужой ящик Gmail через скрытое расширение Chrome | Взлом почты — одно из самых популярных заданий на подпольном рынке хакерских услуг в даркнете, поскольку это краегольный камень для доксинга, кражи личности и перехвата коммуникаций жертвы.
Неудивительно, что злоумышленники придумывают новы... |
| Oct 25, 2021 | IronNet : Russian cyber attack campaigns and actors | Oct 25, 2021
Editor's Note: This post, originally published on December 21, 2020, by Adam Hlavek with Kimberly Ortiz, includes updates dated March 1, April 6, 2021, May 28, 2021, and September 7, 2021. Table of Contents
1. Most recent Russi... |
| Sep 10, 2021 | IronNet Cybersecurity : Russian cyber attack campaigns and actors | Sep 10, 2021
Editor's Note: This post, originally published on December 21, 2020, by Adam Hlavek with Kimberly Ortiz, includes updates dated March 1, April 6, 2021, May 28, 2021, and September 7, 2021. Table of Contents
1. Most recent Russi... |
| May 28, 2021 | SolarWinds hackers are back with a new mass campaign, Microsoft says | Enlarge
Getty Images reader comments 46 with 34 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
The Kremlin-backed hackers who targeted SolarWinds customers in a supply chain attack have been caught... |
| May 28, 2021 | SECUREWORKS CORP.
SecureWorks : USAID-Themed Phishing Campaign Leverages U.S. Elections Lure | USAID-Themed Phishing Campaign Leverages U.S. Elections Lure The targeted organizations are likely of interest to foreign intelligence services, suggesting the intent is espionage. The campaign may be linked to the threat group responsible ... |
| Mar 24, 2021 | RAPID7, INC.
Defending Against the Zero Day: Analyzing Attacker Behavior Post-Exploitation of Microsoft Exchange | In recent weeks, there has been quite a lot of reporting on the exploitation of the latest disclosed vulnerabilities in Microsoft's Exchange Server by an attacker referred to as HAFNIUM. One of the major reasons these latest vulnerabilities... |
| Mar 24, 2021 | Facebook shuts down hackers who infected iOS and Android devices | Enlarge
Getty Images reader comments 26 with 23 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Facebook said it has disrupted a hacking operation that used the social media platform to spread iOS a... |
| Mar 16, 2021 | Большой взлом Microsoft Exchange Server: что произошло и почему это важно | Александра Кукуть 16 марта 2021, 19:19 Большой взлом Microsoft Exchange Server: что произошло и почему это важно
На прошлой неделе стало известно, что группа китайских хакеров смогла получить контроль над email-аккаунтами клиентов Microsoft... |
| Mar 14, 2021 | "Hack everybody you can": What to know about the massive Microsoft Exchange breach | Cybersecurity responders are working around the clock to shore up networks hit by last week's hack of Microsoft's Exchange email service — an attack that has impacted hundreds of thousands of organizations worldwide.
On Friday, the White Ho... |
| Mar 10, 2021 | How cybercrime groups are exploiting the latest Microsoft Exchange flaws | Microsoft
Four critical zero-day vulnerabilities in Microsoft Exchange have paved the way for attackers to take over accessible Exchange servers even without knowing the credentials. On March 2, Microsoft released a series of updates to pat... |
| Mar 10, 2021 | America’s small businesses face the brunt of China’s Exchange server hacks | As the U.S. reportedly readies for retaliation against Russia for hacking into some of the government’s most sensitive federal networks, the U.S. is facing another old adversary in cyberspace: China.
Microsoft last week revealed a new hacki... |
| Mar 8, 2021 | How the Microsoft Exchange hack could impact your organization | Image: Microsoft
Organizations that run Microsoft Exchange Server are being urged to apply several bug fixes to the program in response to a hack from a Chinese cybercriminal group. The attack has sparked concern among everyone from securit... |
| Mar 7, 2021 | Biden administration launching task force to investigate whether China orchestrated Microsoft Exchange hack | President Joe Biden. Jim Lo Scalzo/Reuters
On Tuesday, Microsoft said their Exchange product had been hacked by a state-backed Chinese entity.
At least 30,000 businesses and government bodies were affected by the hack, which began in Januar... |
| Mar 7, 2021 | Biden administration launching task force to investigate whether China orchestrated Microsoft Exchange hack | President Joe Biden. Jim Lo Scalzo/Reuters
On Tuesday, Microsoft said its Exchange product had been hacked by a state-backed Chinese entity.
At least 30,000 businesses and government bodies were affected by the hack, which began in January.... |
| Mar 3, 2021 | Chinese hackers plundered inboxes using flaws in Microsoft’s Exchange server software | We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!
(Reuters) — A China-linked cyberespionage group h... |
| Mar 3, 2021 | Microsoft Warns of Chinese Hackers Targeting Business Email Systems | Microsoft has warned its business customers of potential attacks on the Microsoft Exchange Server, which could result in the loss of sensitive company data.
The attacks, which Microsoft claims originates in China, target specific vulnerabil... |
| Mar 3, 2021 | Microsoft Issues Critical Update Warning As Chinese Hackers Attack Exchange Servers | Microsoft has confirmed that hackers, attributed to state-sponsored Chinese operatives, are currently attacking Microsoft Exchange Server installations using multiple zero-day exploits. |
| Mar 3, 2021 | Chinese hackers plundered inboxes using flaws in Microsoft’s Exchange server software | Join Transform 2021 for the most important themes in enterprise AI & Data. Learn more.
(Reuters) — A China-linked cyberespionage group has been remotely plundering email inboxes using freshly discovered flaws in Microsoft mail server so... |
| Mar 3, 2021 | Urgent patches out for exploited Exchange Server zero-days | Microsoft is strongly urging customers with Exchange Server installations to apply patches that address critical vulnerabilities currently exploited by Chinese nation state hackers to steal information and install malware.
The urgent patche... |
| Mar 2, 2021 | Microsoft issues emergency patches for 4 exploited 0-days in Exchange | Enlarge
Getty Images reader comments 39 with 33 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Microsoft is urging customers to install emergency patches as soon as possible to protect against high... |
| Dec 18, 2020 | U.S. Hack on Government Agencies Affects Microsoft and Many More | December 18, 2020 3 min read This story originally appeared on PCMag
UPDATE: Microsoft was also hacked, according to Reuters, citing unnamed sources. The company's own software tools were then used to attack other victims. However, Microsof... |
| Dec 18, 2020 | SolarWinds-related cyberattacks pose grave risk to government and private sector, says CISA | Image: Getty Images/iStockphoto
State-sponsored hackers who exploited a security hole in a SolarWinds monitoring tool to infiltrate government and business networks have apparently left a long line of victims in their wake.
SEE: Zero trust ... |
| Dec 18, 2020 | U.S. Hack on Government Agencies Affects Microsoft and Many More | December 18, 2020 3 min read This story originally appeared on PCMag
UPDATE: Microsoft was also hacked, according to Reuters, citing unnamed sources. The company's own software tools were then used to attack other victims. However, Microsof... |
| Dec 15, 2020 | SolarWinds hackers have a clever way to bypass multifactor authentication | Enlarge
Getty Images reader comments 108 with 76 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
The hackers behind the supply chain attack that compromised public and private organizations have dev... |
| Dec 14, 2020 | Meet Cozy Bear — the Russian cyber espionage group allegedly behind US government data breach | The US government’s Treasury and Commerce department are reportedly warding off a hacking attempt by the Russian hacker group known as Cozy Bear.
This is only the latest in the long line of hacks that the state-sponsored group of cybercrimi... |
| Nov 6, 2020 | Vietnamese Hackers Ran ‘Fake News’ Websites To Target Visitors | A hacking group that researchers believe is working for Vietnam's government ran almost twenty fake websites and several Facebook pages in an attempt to gather information on visitors and infect some of them with malware, according to new r... |
| Apr 22, 2020 | Researchers Say They Caught an iPhone Zero-Day Hack in the Wild | In the summer of 2016, researchers at a digital rights organization and a cybersecurity firm announced they had caught one of the rarest fish in the cybersecurity ocean—an in the wild attack against an iPhone, using unknown vulnerabilities ... |
| Mar 10, 2020 | NSA warns state-sponsored hackers are exploiting Microsoft Exchange Server vulnerability | Both the NSA and a cybersecurity firm have reminded the tech world of the existence of a remote code execution vulnerability in Microsoft Exchange Server.
Although Microsoft issued a patch for CVE-2020-0688 last month, numerous state-sponso... |
| Sep 25, 2019 | Inside the campaign that tried to compromise Tibetans’ iOS and Android phones | Enlarge reader comments 44 with 39 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Attackers from a group dubbed Poison Carp used one-click exploits and convincing social engineering to target iOS a... |
| Sep 24, 2019 | Tibetans hit by the same mobile malware targeting Uyghurs | A recently revealed mobile malware campaign targeting Uyghur Muslims also ensnared a number of senior Tibetan officials and activists, according to new research.
Security researchers at the University of Toronto’s Citizen Lab say some of th... |
| Sep 8, 2019 | Apple criticized for insensitively downplaying Google's iOS vulnerability revelations | Apple has tried to downplay concerns raised by Google about security vulnerabilities in iOS that could be exploited by malicious websites. Google's Project Zero recently revealed details of flaws in iOS that were being used to target and mo... |
| Sep 7, 2019 | Apple takes flak for disputing iOS security bombshell dropped by Google | Enlarge
Maurizio Pesce / Flickr reader comments 256 with 144 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Apple is taking flak for disputing some minor details of last week’s bombshell report tha... |
| Sep 3, 2019 | A glut of iOS 0-days pushes their price below cost of those for Android | Enlarge
Getty Images | Aurich Lawson reader comments 148 with 88 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
For the first time ever, the security exploit broker Zerodium is paying a higher pric... |
| Sep 20, 2018 | Hacked: Newegg suffers month-long card-skimming attack, exposing credit card details | Just 15 lines of code was all it took for hackers to hijack the checkout of online retailer Newegg. The month-long attack took the form of a huge card skimming operation and is believed to have been carried out by the same group that was re... |
| Sep 19, 2018 | Hackers stole customer credit cards in Newegg data breach | Newegg is clearing up its website after a month-long data breach.
Hackers injected 15 lines of card skimming code on the online retailer’s payments page which remained for more than a month between August 14 and September 18, Yonathan Klijn... |
| Sep 19, 2018 | Hackers Steal Credit Cards From Newegg, Researchers Say | Hackers have stolen the credit card details of all customers of the online shopping giant Newegg who entered their payment information between August 14 and September 18 of this year, according to security researchers.
Security firms RiskIQ... |
| Sep 19, 2018 | NewEgg cracked in breach, hosted card-stealing code within its own checkout | Enlarge / Splat.
John Liu reader comments 201 with 137 posters participating, including story author
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
The popular computer and electronics Web retailer NewEgg has apparently... |
| Aug 28, 2018 | Hackers drop crypto mining on vulnerable Struts | Researchers have recorded the first mass automated attacks against servers running unpatched versions of the open source Apache Struts enterprise web application framework.
The new vulnerability in Apache Struts was made public four days ag... |
| Nov 14, 2016 | Russian hacking team The Dukes targeting NGOs and think tanks after Trump victory | According to Internet security team Volexity has detected an active spear-phishing effort by Russian hacker groups including Cozy Bear and the Dukes. The targeted phishing emails feature subject lines like “The “Shocking” Truth About Electi... |
| Nov 10, 2016 | Russian hackers throw Trump victory party with new spear phishing campaign | As Trump was giving his victory speech, a new wave of spear phishing attacks from Russian hackers was already on its way using his win as click-bait.
Gage Skidmore reader comments 108 with 61 posters participating, including story author
Sh... |
| Oct 8, 2015 | Backdoor infecting Cisco VPNs steals customers’ network passwords | Enlarge reader comments 32 with 22 posters participating
Share this story
Share on Facebook
Share on Twitter
Share on Reddit
Attackers are infecting a widely used virtual private network product sold by Cisco Systems to install backdoors th... |
| Oct 20, 2014 | Chinese Government Accused Of Staging ‘Malicious Attack’ On Apple’s iCloud Service | China’s government is being accused of trying to wiretap Apple customers in the country. Great Fire, a reputed non-profit organization that monitors Internet censorship in China, claimed today that Chinese authorities have laid a trap to sn... |
| BADNEWS! Хакеры из Patchwork APT угодили в свою же паутину | Охотникам за киберугрозами удалось заглянуть на «кухню» группировки хакеров индийского происхождения под названием Patchwork, где они готовят свою новую кампанию, начавшуюся в конце ноября 2021. Целью кампании стали правительственные структ... |
| Ivanti VPN under widespread attack | Ivanti Connect Secure (ICS, formerly Pulse Secure Connect Secure) is a SSL-based VPN solution used by organisations to provide remote secure access to internal networks and resources.
ICS has been the target of a suspected Chinese state-spo... |
| Microsoft’s big email hack: What happened, who did it, and why it matters | On March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. The vulnerabilities go back 10 years, and have been exploited by Chinese hackers at least sin... |
| Ivanti patches two exploited zero-day bugs | Ivanti is warning users against two zero-day vulnerabilities in its Connect Secure VPN devices after they were discovered and disclosed by security researchers from Volexity.
Volexity spotted the vulnerabilities while analysing a system tha... |
| Ivanti security patches start to ship | Ivanti is shipping patches for vulnerabilities in its Connect Secure gateway that were first revealed on January 10.
But while working on its patches, Ivanti said it had found two new vulnerabilities.
“As part of our ongoing investigation i... |
| BreachRx: Intelligent Incident Response Platform Company Raises $6.5 Million | BreachRx, a provider of the first intelligent incident response platform designed for the entire enterprise, announced the closing of its $6.5 million seed round led by SYN Ventures and participated in by Overline.
The company also revealed... |
