Security News
Dozens of ransomware variants used in 722 attacks over 3 months
The ransomware space was very active in the last quarter of 2021, with threat analysts observing 722 distinct attacks deploying 34 different variants. [...]
Bleepingcomputer
16 Mar 2022 645 Views
FBI warns of MFA flaw used by state hackers for lateral movement
The FBI says Russian state-backed hackers gained access to a non-governmental organization (NGO) cloud after enrolling their own device in the organization's Duo MFA following the exploitation of misconfigured default multifactor authentication (MFA) protocols. [...
Bleepingcomputer
16 Mar 2022 606 Views
New Linux botnet exploits Log4J, uses DNS tunneling for comms
A recently discovered botnet under active development targets Linux systems, attempting to ensnare them into an army of bots ready to steal sensitive info, installing rootkits, creating reverse shells, and acting as web traffic proxies. [...]
Bleepingcomputer
16 Mar 2022 669 Views
Gaming Company Ubisoft Confirms It was Hacked, Resets Staff Passwords
French video game company Ubisoft on Friday confirmed it was a victim of a "cyber security incident," causing temporary disruptions to its games, systems, and services.
The Hacker News
15 Mar 2022 646 Views
QNAP warns severe Linux bug affects most of its NAS devices
Taiwanese hardware vendor QNAP warns most of its Network Attached Storage (NAS) devices are impacted by a high severity Linux vulnerability dubbed 'Dirty Pipe' that allows attackers with local access to gain root privileges.
BleepingComputer
15 Mar 2022 898 Views
Russian Pushing New State-run TLS Certificate Authority to Deal With Sanctions
The Russian government has established its own TLS certificate authority (CA) to address issues with accessing websites that have arisen in the wake of sanctions imposed by the west following the country's unprovoked military invasion of Ukraine.
The Register
14 Mar 2022 693 Views
Corporate website contact forms used to spread BazarBackdoor malware
The stealthy BazarBackdoor malware is now being spread via website contact forms rather than typical phishing emails to evade detection by security software. [...]
Bleepingcomputer
11 Mar 2022 669 Views
Russia may try to dodge sanctions using ransomware payments, warns US Treasury
The Financial Crimes Enforcement Network has issued a statement for financial institutions to be aware of suspicious activity.
The post Russia may try to dodge sanctions using ransomware payments, warns US Treasury appeared first on TechRepublic.
TechRepublic
11 Mar 2022 580 Views
WhatsApp emits extension to detect tampering with desktop web apps
Code Verify tool confers with Cloudflare to warn of any shenanigans WhatsApp and Cloudflare have teamed up to provide desktop users of WhatsApp's web client with a browser extension called Code Verify that checks the integrity of the software running in their browser.…
The Register
11 Mar 2022 7537 Views
Nearly 30% of critical WordPress plugin bugs don't get a patch
Patchstack, a leader in WordPress security and threat intelligence, has released a whitepaper to present the state of WordPress security in 2021, and the report paints a dire picture.
Bleepingcomputer
10 Mar 2022 625 Views
