U.S. Cyber Command exposes 3 new malware strains used by North Korean hackers
The COPPERHEDGE, TAINTEDSCRIBE, and PEBBLEDASH malware strains are Remote Access Tools capable of remote reconnaissance and exfiltration of sensitive information from target systems.
May 13, 2020
Thousands of Android apps leaking user data via misconfigured Firebase databases
Firebase is used by an estimated 30 percent of all apps on the Google Play Store.
May 13, 2020
US authorities publish list of the most exploited vulnerabilities since 2016
The CVE-2017-11882, CVE-2017-0199, and CVE-2012-0158 flaws are most frequently exploited by threat actors from China, Iran, North Korea, and Russia.
May 13, 2020
Microsoft Patch Tuesday review, May 2020
Microsoft has fixed 111 vulnerabilities this month.
May 13, 2020
Vulnerability summary for the week: May 12, 2020
Weekly vulnerability digest.
May 12, 2020
Private messages of WeLeakData users are being sold on the dark web
The now defunct WeLeakData forum was one of the largest cracking communities that specialized in the trade of leaked databases.
May 12, 2020
ATM vendor Diebold Nixdorf and railway vehicle maker Stadler hit by cyber attacks
The systems at Diebold Nixdorf were infected by the ProLock ransomware.
May 12, 2020
Blue Mockingbird Monero-mining campaign exploits public-facing web apps
The Blue Mockingbird campaign deploys Monero cryptocurrency-mining payloads on Windows machines by exploiting web apps that implemented Telerik UI for ASP.NET AJAX.
May 11, 2020
State-sponsored hackers attempted to hack into WHO’s servers by posing as news organizations and researchers
The attacks bear the hallmarks of the Iranian state-sponsored group known as “Charming Kitten.”
May 11, 2020
Naikon APT silently spied on government entities in the APAC region for at least five years
The Naikon APT group disappeared off radars in 2015, but it appears that they have not been idle.
May 7, 2020