Intrusions with Snowblind involved the injection of a seccomp filter to intercept system calls, as well as a SIGSYS signal handler to direct anti-tampering code to unchanged APK versions allowing the deactivation of several app security features.
US firms claimed to be attacked by BianLian ransomware gang
U.S.-based nonprofit organization Better Business Bureau and skin care provider U.S. Dermatology Partners were admitted to be compromised by the BianLian ransomware operation.
Global ransomware attacks deployed by suspected China-, North Korea-linked hackers
Attacks aimed at up to 30 organizations in Europe and the Americas, particularly the U.S. manufacturing industry, have been linked to Chinese hacking group APT41 and North Korean state-backed advanced persistent threat operation Andariel
Only U.S banking-as-a-service provider Evolve Bank & Trust was noted by cyber threat monitoring firm HackManac to have been impacted by an attack claimed by the LockBit ransomware operation to have resulted in the compromise of 33 TB of files from...
Toward greater transparency: Unveiling Cloud Service CVEs
Welcome to the second installment in our series on transparency at the Microsoft Security Response Center (MSRC). In this ongoing discussion, we discuss our commitment to provide comprehensive vulnerability information to our customers. At MSRC, our...