FBI shares technical details on Hive ransomware

The Hive ransomware relies on a variety of tactics, techniques, and procedures in order to breach enterprise networks.

Ragnarok ransomware gang shuts down operation, releases master decryption key

The Ragnarok ransomware operation has been active since at least January 2020.

Microsoft is urging Exchange users to patch ProxyShell bugs

The ProxyShell vulnerabilities allow attackers to elevate privileges on the Exchange PowerShell backend and perform unauthenticated, remote code execution.

FIN8 cybercriminal group adds new "Sardonic" backdoor to its arsenal

Written in C++, the Sardonic backdoor allows its operators to collect system information, execute arbitrary commands, and load and execute additional plugins.

New SparklingGoblin APT targets education, retail and government sectors across the world

The new APT is believed to have ties with a well-known Winnti Group hacker collective.