Threat Group Takes Aim Again at Cloud Platform Provider Zoho
Attackers that previously targeted the cloud platform provider have shifted their focus to additional products in the company’s portfolio.
Read More
Author: Elizabeth Montalbano
AT&T Takes Steps to Mitigate Botnet Found Inside Its Network
AT&T is battling a modular malware called EwDoor on 5,700 VoIP servers, but it could have a larger wildcard certificate problem.
Read MoreWidespread ‘Smishing’ Campaign Defrauds Iranian Android Users
Attackers use socially engineered SMS messages and malware to compromise tens of thousands of devices and drain user bank accounts.
Read MoreYanluowang Ransomware Tied to Thieflock Threat Actor
Links between the tactics and tools demonstrated in attacks suggest a former affiliate has switched loyalties, according to new research.
Read MoreShape-Shifting ‘Tardigrade’ Malware Hits Vaccine Makers
Some security researchers say it’s actually Cobalt Strike and not a SmokeLoader variant, but BioBright says in-depth testing shows it’s for real a scary morphic malware that changes its parts and recompiles itself.
Read MoreNew Twists on Gift-Card Scams Flourish on Black Friday
Fake merchandise and crypto jacking are among the new ways cybercriminals will try to defraud people flocking online for Black Friday and Cyber Monday.
Read MoreAttackers Actively Target Windows Installer Zero-Day
Researcher discovered a “more powerful” variant of an elevation-of-privilege flaw for which Microsoft released a botched patch earlier this month.
Read MoreCommon Cloud Misconfigurations Exploited in Minutes, Report
Opportunistic attackers instantly exploited insecurely exposed services deployed in honeypots by Unit 42 researchers, demonstrating the immediate danger of these typical mistakes.
Read MoreCalifornia Pizza Kitchen Serves Up Employee SSNs in Data Breach
A hefty slice of data – that of 100K+ current and former employees – was spilled in an “external system breach,” the pizza chain said.
Read MoreSpear-Phishing Campaign Exploits Glitch Platform to Steal Credentials
Threat actors are targeting Middle-East-based employees of major corporations in a scam that uses a specific ‘ephemeral’ aspect of the project-management tool to link to SharePoint phishing pages.
Read More