December 2024 – Page 40

Russia-Linked Turla Exploits Pakistani Hackers’ Servers to Target Afghan and Indian Entities

The Russia-linked advanced persistent threat (APT) group known as Turla has been linked to a previously undocumented campaign that involved infiltrating the command-and-control (C2) servers of a Pakistan-based hacking group named Storm-0156 to conduct its own operations since 2022.
The activity, first observed in December 2022, is the latest instance of the nation-state adversary “embedding

Spy v Spy: Russian APT Turla Caught Stealing from Pakistani APT

Russia’s Turla hackers hijacked 33 command servers operated by Pakistani hackers who had themselves breached Afghanistan and Indian targets.

The post Spy v Spy: Russian APT Turla Caught Stealing from Pakistani APT appeared first on SecurityWeek.

Russian hackers hijack Pakistani hackers’ servers for their own attacks

The notorious Russian cyber-espionage group Turla is hacking other hackers, hijacking the Pakistani threat actor Storm-0156’s infrastructure to launch their own covert attacks on already compromised networks. […]

Largest German Crime Marketplace Taken Down, Administrator Arrested

Crimenetwork, the largest German-speaking online crime marketplace, has been shut down and one of its admins has been arrested.

The post Largest German Crime Marketplace Taken Down, Administrator Arrested appeared first on SecurityWeek.

Japan warns of IO-Data zero-day router flaws exploited in attacks

Japan’s CERT is warning that hackers are exploiting zero-day vulnerabilities in I-O Data router devices to modify device settings, execute commands, or even turn off the firewall. […]

Six password takeaways from the updated NIST cybersecurity framework

Updated NIST guidelines reject outdated password security practices in favor of more effective protections. Learn from Specops Software about 6 takeaways from NIST’s new guidance that help create strong password policies. […]

Tuskira Scores $28.5M for AI-Powered Security Mesh

Tuskira is working on an AI-powered security mesh promising to integrate fragmented security tools and mitigate risk exposure in real time.

The post Tuskira Scores $28.5M for AI-Powered Security Mesh appeared first on SecurityWeek.

CISA Warns of Zyxel Firewall Vulnerability Exploited in Attacks

A second vulnerability in Zyxel firewalls has been exploited in Helldown ransomware attacks over the past weeks.

The post CISA Warns of Zyxel Firewall Vulnerability Exploited in Attacks appeared first on SecurityWeek.

Government Guidance on Chinese Telco Hacking Highlights Threat to Cisco Devices

Government agencies issue guidance on Chinese telecoms hacking as US officials say threat actors may have yet to be expelled.

The post Government Guidance on Chinese Telco Hacking Highlights Threat to Cisco Devices appeared first on SecurityWeek.

Virtual Event Today: Cyber AI & Automation Summit

SecurityWeek’s Cyber AI & Automation Summit takes place on December 4th, as a fully immersive online experience.

The post Virtual Event Today: Cyber AI & Automation Summit appeared first on SecurityWeek.

Month: December 2024