Security Bulletin

An increasingly sophisticated threat landscape requires ongoing efforts to track potential security gaps within networks and systems.

Cybercrime is big business, and techniques of bad actors are growing increasingly sophisticated. That leaves security teams thirsting for near realtime intelligence about the threat landscape.

Sure, everyone focuses on CVEs, but not every company has the ability to have full visibility into legacy IT.

The most popular office software suite in China actually has two critical vulnerabilities, which allowed hackers the opportunity for remote code execution. Time to patch.

Pioneer Kitten was found to collaborate with ALPHV/BlackCat, NoEscape and Ransomhouse.

CISA warned about the RCE zero-day vulnerability in AVTECH IP cameras in early August, and now vulnerable systems are being used to spread malware.

The pivot is one of several changes the groups using the malware have used in recent attacks.

Security pros say by exploiting a recently discovered ESXi flaw, BlackByte has shifted to a more APT-style approach.

Novel attack vectors leverage the CVE-2023-22527 RCE flaw discovered in January, which is still under active attack, to turn targeted cloud environments into cryptomining networks.

The company has assessed four of the five disclosed vulnerabilities as being of high to critical severity.

Russian ransomware operation Karakurt member Deniss Zolotarjovs has been indicted in the U.S. for his involvement as a "cold case" negotiator for the group following his extradition last month.

Aside from targeting U.S., Russian, and Brazilian government and public service entities, Greasy Opal's CAPTCHA solver has also been aimed at Amazon, Apple, Facebook, WhatsApp, Steam, and other widely known organizations in the tech industry.