Biztonsági szemle

The pivot is one of several changes the groups using the malware have used in recent attacks.

Security pros say by exploiting a recently discovered ESXi flaw, BlackByte has shifted to a more APT-style approach.

Novel attack vectors leverage the CVE-2023-22527 RCE flaw discovered in January, which is still under active attack, to turn targeted cloud environments into cryptomining networks.

The company has assessed four of the five disclosed vulnerabilities as being of high to critical severity.

Russian ransomware operation Karakurt member Deniss Zolotarjovs has been indicted in the U.S. for his involvement as a "cold case" negotiator for the group following his extradition last month.

Aside from targeting U.S., Russian, and Brazilian government and public service entities, Greasy Opal's CAPTCHA solver has also been aimed at Amazon, Apple, Facebook, WhatsApp, Steam, and other widely known organizations in the tech industry.

The U.S. Department of Justice announced that former Verizon employee Ping Li has admitted his involvement in conspiring with China's Ministry of State Security while working for the telecommunications firm.

The emails impersonate well-known companies in the industry, fooling the victim into thinking they are communicating with a legitimate entity.

Organizations have been urged to prioritize the type of events logged and ensure the presence of accurate timestamps, device identifiers, executed commands, autonomous system numbers, and unique event identifiers to better aid in incident response...

"Transparency is one of the most powerful tools we have to counteract foreign malign influence operations intended to undermine our elections and democratic institutions," said the FBI.

With the right processes and tools, organizations can implement advanced AI security frameworks that make hidden risks visible, enabling security teams to track and address them before impact.

Consolidating Bird Eats Bug's bug reporting solution into BrowserStack's ecosystem seeks to address ongoing issues in the flaw reporting process, as well as improve the testing experiences of developer and quality assurance teams.