Krebs on Security

MAY 9, 2023

First up in May’s zero-day flaws is CVE-2023-29336 , which is an “elevation of privilege” weakness in Windows which has a low attack complexity, requires low privileges, and no user interaction. ” Adam Barnett , lead software engineer at Rapid7 , said CVE-2023-24932 deserves a considerably higher threat score.

Malware 242

Malware Software Internet Internet 242

Malwarebytes

OCTOBER 11, 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. This provides the best overall picture of ransomware activity, but the true number of attacks is far higher.

Ransomware 113

Ransomware Social Engineering Backups Engineering 113

Security Boulevard

APRIL 8, 2024

The post 10 Million Devices Were Infected by Data-Stealing Malware in 2023 appeared first on Security Boulevard. Cybercriminals pilfered an average of 50.9 login credentials per device, evidence of the pressing need for cybersecurity measures.

Malware 141

Malware Cybersecurity Social Engineering Engineering 141

Krebs on Security

JULY 11, 2023

July marks the sixth month this year that Apple has released updates for zero-day vulnerabilities — those that get exploited by malware or malcontents before there is an official patch available. CVE-2023-36874 is an elevation of privilege bug in the Windows Error Reporting Service.

Software 214

Software Malware Antivirus Ransomware 214

Webroot

OCTOBER 25, 2023

Our annual analysis of the most notorious malware has arrived. As always, it covers the trends, malware groups, and tips for how to protect yourself and your organization. Their tactics have evolved significantly over the years, with ransomware now the malware of choice for cybercriminals.

Malware 98

Malware Artificial Intelligence Ransomware Penetration Testing 98

Security Affairs

NOVEMBER 21, 2024

Mexico is investigating a ransomware attack targeting its legal affairs office, as confirmed by the president amidst growing cybersecurity concerns. Mexico’s president announced the government is investigating an alleged ransomware hack that targeted the administration’s legal affairs office. Knight, also known as Cyclops 2.0,

Government 140

Government Hacking Ransomware Insurance 140

Malwarebytes

NOVEMBER 15, 2023

This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. This provides the best overall picture of ransomware activity, but the true number of attacks is far higher.

Ransomware 91

Ransomware Education Backups Cyber Insurance 91

Security Affairs

OCTOBER 17, 2024

Russia-linked threat actor RomCom targeted Ukrainian government agencies and Polish entities in cyber attacks since late 2023. In the past, RomCom launched ransomware attacks and cyber espionage campaigns, however, it is ramping up attacks focused on data exfiltration from Ukrainian targets. ” reads the report published by Talos.

Government 121

Government Malware Cyber Attacks Ransomware 121

Malwarebytes

FEBRUARY 14, 2024

In 2023, the CL0P ransomware gang broke the scalability barrier and shook the security world with a series of short, automated campaigns, hitting hundreds of unsuspecting targets simultaneously with attacks based on zero-day exploits. CL0P found another way. It remains to be seen if other gangs can or will follow CL0P’s lead.

Ransomware 73

Ransomware Cybercrime Backups Malware 73

Malwarebytes

SEPTEMBER 12, 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. This provides the best overall picture of ransomware activity, but the true number of attacks is far higher.

Ransomware 92

Ransomware Backups Data breaches Malware 92

Security Boulevard

MARCH 1, 2024

The post Report: Average Initial Ransomware Demand in 2023 Reached $600K appeared first on Security Boulevard. An Arctic Wolf report found the median initial ransom demand made by cybercriminals rose 20% year-over-year to $600,000.

Ransomware 125

Ransomware Risk Government Malware 125

Malwarebytes

DECEMBER 13, 2023

This article is based on research by Marcelo Rivero, Malwarebytes’ ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. This provides the best overall picture of ransomware activity, but the true number of attacks is far higher.

Ransomware 83

Ransomware Healthcare Encryption Backups 83

Security Affairs

NOVEMBER 24, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Android Malware Detection Based on Behavioral-Level Features with Graph Convolutional Networks.

Malware 61

Malware Spyware Antivirus VPN 61

The Hacker News

DECEMBER 25, 2023

The banking malware known as Carbanak has been observed being used in ransomware attacks with updated tactics. The malware has adapted to incorporate attack vendors and techniques to diversify its effectiveness," cybersecurity firm NCC Group said in an analysis of ransomware attacks that took place in November 2023.

Banking 102

Banking Malware Ransomware Cybersecurity 102

Security Affairs

JANUARY 25, 2024

The 2023 RedSense report covers long-term observations we have made regarding intel trends and interconnectivity. These observations were made by analyzing numerous 2023 threat findings and discoveries, and include references to case studies that were reported on by RedSense throughout the year.

Ransomware 127

Ransomware Cybercrime Malware Data breaches 127

Security Affairs

NOVEMBER 2, 2023

Rapid7 researchers warn of the suspected exploitation of a recently disclosed critical security flaw (CVE-2023-46604) in the Apache ActiveMQ. Cybersecurity researchers at Rapid7 are warning of the suspected exploitation of the recently disclosed critical vulnerability CVE-2023-46604 in the Apache ActiveMQ. before 5.18.3 before 5.17.6

Ransomware 132

Ransomware Cybercrime Software Encryption 132

Security Affairs

JANUARY 13, 2024

The Finish National Cybersecurity Center (NCSC-FI) warns of increased Akira ransomware attacks targeting NAS and tape backup devices of organizations in the country. The Finish National Cybersecurity Center (NCSC-FI) reported an increase in Akira ransomware attacks, targeting organizations in the country. concludes the alert.

Ransomware 136

Ransomware Backups VPN Authentication 136

Penetration Testing

SEPTEMBER 14, 2024

A recent report from Bitdefender highlights how Medusa has not only continued its relentless attacks but has also established a unique online presence on both the dark web and the... The post Medusa Exploits Fortinet Flaw (CVE-2023-48788) for Stealthy Ransomware Attacks appeared first on Cybersecurity News.

Ransomware 73

Ransomware Cybersecurity Malware 73

SecureList

MAY 14, 2024

Incident response analyst report 2023 As an information security company, our services include incident response and investigation, and malware analysis. Our annual Incident Response Report presents anonymized statistics on the cyberattacks we investigated in 2023. Read the full 2023 Incident Response Report (PDF).

Ransomware 106

Ransomware Authentication Passwords Government 106

SecureList

MAY 6, 2024

A significant share of scam, phishing and malware attacks is about money. Methodology In this report, we present an analysis of financial cyberthreats in 2023, focusing on banking Trojans and phishing pages that target online banking, shopping accounts, cryptocurrency wallets and other financial assets. million in 2022. of attacks.

Phishing 112

Phishing Banking Mobile Scams 112

Malwarebytes

JUNE 9, 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. This provides the best overall picture of ransomware activity, but the true number of attacks is far higher. MalasLocker: The Robin Hood of ransomware?

Ransomware 80

Ransomware Education Encryption Software 80

Security Affairs

JANUARY 13, 2024

The Finish National Cybersecurity Center (NCSC-FI) warns of increased Akira ransomware attacks targeting NAS and tape backup devices of organizations in the country. The Finish National Cybersecurity Center (NCSC-FI) reported an increase in Akira ransomware attacks, targeting organizations in the country. concludes the alert.

Ransomware 122

Ransomware Backups VPN Authentication 122

SecureList

DECEMBER 4, 2023

The statistics in this report cover the period from November 2022 through October 2023. The year in figures During the reported period, Kaspersky solutions: Blocked 437,414,681 malware-class attacks launched from online resources across the globe. Prevented ransomware attacks on the computers of 193,662 unique users.

Banking 105

Banking Malware Ransomware Accountability 105

Malwarebytes

AUGUST 10, 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. This provides the best overall picture of ransomware activity, but the true number of attacks is far higher. The driving force behind this huge number?

Ransomware 65

Ransomware Backups Encryption Software 65

Security Affairs

APRIL 17, 2024

Threat actors are exploiting the CVE-2023-22518 flaw in Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. At the end of October 2023, Atlassian warned of a critical security flaw, tracked as CVE-2023-22518 (CVSS score 9.1), that affects all versions of Confluence Data Center and Server.

Ransomware 144

Ransomware Encryption Malware Accountability 144

Security Boulevard

DECEMBER 21, 2023

The post AWS re:Invent 2023: Ransomware Defense appeared first on Security Boulevard. Shira Rubinoff talks with Naj Husain from Elastio at AWS re:Invent.

Ransomware 69

Ransomware Malware Cybersecurity 69

SecureList

MAY 8, 2024

Ransomware attacks continue to be one of the biggest contemporary cybersecurity threats, affecting organizations and individuals alike on a global scale. As we approach International Anti-Ransomware Day, we have analyzed the major ransomware events and trends. The group itself also has a large affiliate network.

Ransomware 122

Ransomware Encryption Small Business Cybersecurity 122

Security Affairs

FEBRUARY 13, 2024

Maintainers behind the Ransomfeed platform have released Q3 Report 2023 including activities of 185 criminal groups operating worldwide. Throughout this period, the platform diligently tracked 185 criminal groups operating worldwide, meticulously tracing 342 servers employed for ransomware activities.

Ransomware 133

Ransomware Data collection Hacking Cybersecurity 133

Security Boulevard

SEPTEMBER 26, 2023

New and updated coverage for ransomware and malware variants, including RagnarLocker ransomware, LokiLocker ransomware, and others. The post RagnarLocker Ransomware, LokiLocker Ransomware, and More: Hacker’s Playbook Threat Coverage Round-up: September 27th, 2023 appeared first on SafeBreach.

Ransomware 64

Ransomware Malware 64

Security Affairs

JULY 15, 2024

Multiple ransomware groups were spotted exploiting a vulnerability, tracked as CVE-2023-27532, in Veeam Backup & Replication. The vulnerability CVE-2023-275327 (CVSS score of 7.5) The vulnerability was addressed in March 2023, and shortly after a PoC exploit code for this issue was released publicly.

Backups 140

Backups Ransomware Antivirus DNS 140

Security Affairs

MARCH 11, 2024

BianLian ransomware group was spotted exploiting vulnerabilities in JetBrains TeamCity software in recent attacks. Researchers from GuidePoint Security noticed, while investigating a recent attack linked to the BianLian ransomware group, that the threat actors gained initial access to the target by exploiting flaws in a TeamCity server.

Ransomware 132

Ransomware Malware Manufacturing Healthcare 132

Penetration Testing

JANUARY 29, 2024

The GRIT Ransomware Annual Report 2023 offers a comprehensive overview of the evolving ransomware landscape.

Ransomware 80

Ransomware Penetration Testing Malware 80

Malwarebytes

DECEMBER 29, 2023

Ransomware gangs care about one thing: Stealing money. Worst of all, they show no sign of slowing down, and their extortion attempts—which no longer focus on ransomware delivery alone—are getting bolder, meaner, and uglier. Considering all this, it’s pretty damn nice to see ransomware gangs lose.

Ransomware 83

Ransomware Malware Backups Encryption 83

Thales Cloud Protection & Licensing

NOVEMBER 1, 2023

Thales Wins Big in 2023 madhav Thu, 11/02/2023 - 05:09 Here at Thales, we are incredibly proud of what we do. 2023 has been a particularly good year for us; keep reading for a run-through of our most recent successes. Here at Thales, we believe that our research can transform the cybersecurity landscape for the better.

Marketing 143

Marketing Cybersecurity Technology CISO 143

Security Affairs

APRIL 21, 2024

Government agencies revealed that Akira ransomware has breached over 250 entities worldwide and received over $42 million in ransom payments. Like other ransomware gangs, the group has developed a Linux encryptor to target VMware ESXi servers. The attackers mostly used Cisco vulnerabilities CVE-2020-3259 and CVE-2023-20269.

Ransomware 141

Ransomware Encryption Antivirus VPN 141

Webroot

OCTOBER 31, 2024

This year has seen ransomware groups adapt and innovate, pushing the boundaries of their malicious capabilities and evasiveness from law enforcement. In our annual “Nastiest Malware” report, now in its sixth year, we’ve observed a steady increase in both the number and sophistication of malware attacks.

Malware 83

Malware Ransomware Passwords Healthcare 83

Tech Republic Security

APRIL 18, 2024

Nearly 10 million devices were infected with data-stealing malware in 2023, with criminals stealing an average of 50.9 credentials per device.

Malware 186

Malware Big data Data breaches Ransomware 186