Category: Viral
Shahin Pirooz, a channel veteran and founder of WhiteDog, says he’s seen the massive need to bring a more-comprehensive detection and response offering to MSPs. WhiteDog Cybersecurity is seeking to drive the expansion of its MDR (managed detection and response) alternative platform through recruiting an array of new MSP partners, the company’s founder told CRN.…
Read More
Cybersecurity researchers have uncovered a novel malware campaign that leverages Google Sheets as a command-and-control (C2) mechanism. The activity, detected by Proofpoint starting August 5, 2024, impersonates tax authorities from governments in Europe, Asia, and the U.S., with the goal of targeting over 70 organizations worldwide by means of a bespoke tool called Voldemort that’s…
Read More
Aug 30, 2024Ravie LakshmananCyber Threat / Cyber Espionage Cybersecurity researchers have unearthed new network infrastructure set up by Iranian threat actors to support activities linked to the recent targeting of U.S. political campaigns. Recorded Future’s Insikt Group has linked the infrastructure to a threat it tracks as GreenCharlie, an Iran-nexus cyber threat group that overlaps…
Read More
The most dangerous vulnerability you’ve never heard of. In the world of cybersecurity, vulnerabilities are discovered so often, and at such a high rate, that it can be very difficult to keep up with. Some vulnerabilities will start ringing alarm bells within your security tooling, while others are far more nuanced, but still pose an…
Read More
Aug 30, 2024Ravie LakshmananCryptojacking / Vulnerability Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence Data Center and Confluence Server to conduct illicit cryptocurrency mining on susceptible instances. “The attacks involve threat actors that employ methods such as the deployment of shell scripts and XMRig miners, targeting of SSH endpoints,…
Read More
Aug 30, 2024Ravie LakshmananCyber Espionage / Threat Intelligence Chinese-speaking users are the target of a “highly organized and sophisticated attack” campaign that is likely leveraging phishing emails to infect Windows systems with Cobalt Strike payloads. “The attackers managed to move laterally, establish persistence and remain undetected within the systems for more than two weeks,” Securonix…
Read More
Aug 30, 2024Ravie LakshmananCryptocurrency / Malware Threat actors with ties to North Korea have been observed publishing a set of malicious packages to the npm registry, indicating “coordinated and relentless” efforts to target developers with malware and steal cryptocurrency assets. The latest wave, which was observed between August 12 and 27, 2024, involved packages named…
Read More
The exploration of a sale of cybersecurity firm Secureworks by majority owner Dell is reportedly underway. Dell Technologies is mulling the possibility of selling Secureworks to private equity investors, according to a report. According to a Reuters report Thursday, Dell—which is the majority owner of publicly traded Secureworks—has hired a pair of investment bankers as…
Read More
OpenAI is reportedly courting Apple as an investor. OpenAI is reportedly courting Apple as an investor in a funding round that would take the ChatGPT creator and artificial intelligence innovator to a valuation of more than $100 billion. Apple rival Microsoft – which has invested about $13 billion into OpenAI, owns 49 percent of the…
Read More
ESET researchers discovered a code execution vulnerability in WPS Office for Windows (CVE-2024-7262), as it was being exploited by APT-C-60, a South Korea-aligned cyberespionage group. Upon analyzing the root cause, we subsequently discovered another way to exploit the faulty code (CVE-2924-7263). Following a coordinated disclosure process, both vulnerabilities are now patched – in this blogpost,…
Read More