CISA adds Microsoft SharePoint vulnerability to the KEV Catalog

June 27, 2019

Sodinokibi Ransomware Adds Malvertising and More Exploit Kits to Distribution Methods

2 min read - Sodinokibi ransomware affiliates have added malvertising campaigns to the growing list of attack vectors used to infect victims, according to reports.

June 19, 2019

Fake Android Apps Steal Cryptocurrency Credentials With 2FA Bypass Technique

2 min read - Security researchers discovered two malicious Android apps that leveraged a clever 2FA bypass technique to steal Turkish users' cryptocurrency credentials.

June 19, 2019

TCP SACK Panic Flaw Could Compromise Production Linux Machines

2 min read - A kernel flaw dubbed TCP SACK Panic could allow remote attackers to compromise organizations running large fleets of production Linux computers, according to a series of security advisories.

June 18, 2019

Free Decryption Tool Enables Victims of GandCrab Ransomware to Recover Their Files

< 1 min read - A security firm released an updated decryption tool that enables victims of GandCrab ransomware version 5.2 and below to recover their stolen files for free.

June 18, 2019

Outlaw Threat Group Using Botnet to Distribute Monero Miner, Perl-Based Backdoor

2 min read - The Outlaw threat group is using a botnet to distribute a Monero cryptocurrency miner and a Perl-based backdoor component.

June 18, 2019

InterPlanetary Storm Malware Using IPFS P2P Network to Hide Its Activities

2 min read - A malware campaign dubbed InterPlanetary Storm is hiding its network activity among legitimate traffic by using a P2P network for its command-and-control communications.

June 17, 2019

Threat Actors Use Targeted Attack Tools to Distribute Cryptocurrency Miners, Ransomware

2 min read - Threat actors are using targeted attack tools to distribute typical malware, such as cryptocurrency miners and ransomware.

June 17, 2019

XENOTIME Threat Group Now Targeting Electric Utility Organizations

2 min read - In addition to oil and gas companies, the XENOTIME threat group has begun targeting electric utility organizations located in the U.S. and elsewhere.

June 12, 2019

Fraudsters Abuse Smartphone Google Calendar Feature to Push Through Scam Offers

2 min read - Fraudsters are abusing a Google Calendar feature that's commonly enabled on smartphones to target unsuspecting users with scam offers.

June 12, 2019

Latest Mirai Malware Variant Contains 18 Exploits, Focuses on Embedded IoT Devices

2 min read - Researchers discovered a Mirai malware variant with 18 exploits targeting embedded internet of things (IoT) devices.