The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has sanctioned PM2BTC and Cryptex, two cryptocurrency exchanges that laundered funds from Russian ransomware gangs and other cybercrime groups. […]
Automattic blocks WP Engine’s access to WordPress resources
WordPress.org has banned WP Engine from accessing its resources and stopped delivering plugin updates to websites hosted on the platform, urging impacted users to choose other hosting providers. […]
Remote Code Execution, DoS Vulnerabilities Patched in OpenPLC
Critical and high-severity vulnerabilities that can be exploited for DoS attacks and remote code execution have been patched in OpenPLC.
The post Remote Code Execution, DoS Vulnerabilities Patched in OpenPLC appeared first on SecurityWeek.
Fake WalletConnect app on Google Play steals Android users’ crypto
A crypto draining app mimicking the legitimate ‘WalletConnect’ project has been distributed over Google Play for five months getting more than 10,000 downloads. […]
Cisco Patches High-Severity Vulnerabilities in IOS Software
Cisco has released patches for seven high-severity vulnerabilities affecting products running IOS and IOS XE software.
The post Cisco Patches High-Severity Vulnerabilities in IOS Software appeared first on SecurityWeek.
Overloaded with SIEM Alerts? Discover Effective Strategies in This Expert-Led Webinar
Imagine trying to find a needle in a haystack, but the haystack is on fire, and there are a million other needles you also need to find. That’s what dealing with security alerts can feel like.
SIEM was supposed to make this easier, but somewhere along the way, it became part of the problem. Too many alerts, too much noise, and not enough time to actually stop threats.
It’s time for a change.
SIEM was supposed to make this easier, but somewhere along the way, it became part of the problem. Too many alerts, too much noise, and not enough time to actually stop threats.
It’s time for a change.
N. Korean Hackers Deploy New KLogEXE and FPSpy Malware in Targeted Attacks
Threat actors with ties to North Korea have been observed leveraging two new malware strains dubbed KLogEXE and FPSpy.
The activity has been attributed to an adversary tracked as Kimsuky, which is also known as APT43, ARCHIPELAGO, Black Banshee, Emerald Sleet (formerly Thallium), Sparkling Pisces, Springtail, and Velvet Chollima.
“These samples enhance Sparkling Pisces’ already extensive arsenal
The activity has been attributed to an adversary tracked as Kimsuky, which is also known as APT43, ARCHIPELAGO, Black Banshee, Emerald Sleet (formerly Thallium), Sparkling Pisces, Springtail, and Velvet Chollima.
“These samples enhance Sparkling Pisces’ already extensive arsenal
HPE Aruba Networking fixes critical flaws impacting Access Points
HPE Aruba Networking has fixed three critical vulnerabilities in the Command Line Interface (CLI) service of its Aruba Access Points. […]
Google Sees Drop in Memory Safety Bugs in Android as Code Matures
Memory safety bugs in Android have decreased significantly as old code matures and new code uses memory-safe languages.
The post Google Sees Drop in Memory Safety Bugs in Android as Code Matures appeared first on SecurityWeek.
Police Are Probing a Cyberattack on Wi-Fi Networks at UK Train Stations
An investigation has been launched into a Wi-Fi service hack that has impacted many train stations in the United Kingdom.
The post Police Are Probing a Cyberattack on Wi-Fi Networks at UK Train Stations appeared first on SecurityWeek.