A WPS Office zero-day vulnerability tracked as CVE-2024-7262 was exploited by South Korean hacker group APT-C-60.
The post WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies appeared first on SecurityWeek.
Malware Delivered via Malicious Pidgin Plugin, Signal Fork
Threat actors delivered malware via instant messaging applications, including a malicious Pidgin plugin and an unofficial Signal fork.
The post Malware Delivered via Malicious Pidgin Plugin, Signal Fork appeared first on SecurityWeek.
Check Point to Acquire External Cyber Risk Management Firm Cyberint
Check Point says the acquisition will enhance its own SOC capabilities and expand its managed threat intelligence offerings.
The post Check Point to Acquire External Cyber Risk Management Firm Cyberint appeared first on SecurityWeek.
Rising Tides: Runa Sandvik on Creating Work that Makes a Difference
Runa Sandvik is an inaugural member of CISA’s Technical Advisory Council and the Aspen Institute’s Global Cybersecurity Group, and a board member of the Signals Network. But she is so much more.
The post Rising Tides: Runa Sandvik on Creating Work that Makes a Difference appeared first on SecurityWeek.
US Offering $2.5 Million Reward for Belarusian Malware Distributor
The US government is offering a $2.5 million reward for information leading to the arrest of malware distributor Volodymyr Kadariya.
The post US Offering $2.5 Million Reward for Belarusian Malware Distributor appeared first on SecurityWeek.
BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave
The threat actors behind the BlackByte ransomware group have been observed likely exploiting a recently patched security flaw impacting VMware ESXi hypervisors, while also leveraging various vulnerable drivers to disarm security protections.
“The BlackByte ransomware group continues to leverage tactics, techniques, and procedures (TTPs) that have formed the foundation of its tradecraft since its
“The BlackByte ransomware group continues to leverage tactics, techniques, and procedures (TTPs) that have formed the foundation of its tradecraft since its
How Lessons Learned From the 2016 Campaign Led US Officials to Be More Open About Iran Hack
The lessons learned from the 2016 election hacking made US officials more open about the recent Iranian hack targeting presidential campaigns.
The post How Lessons Learned From the 2016 Campaign Led US Officials to Be More Open About Iran Hack appeared first on SecurityWeek.
950,000 Impacted by Young Consulting Data Breach
The personal information of over 950,000 people was compromised in a BlackSuit ransomware attack on Young Consulting.
The post 950,000 Impacted by Young Consulting Data Breach appeared first on SecurityWeek.
Second Apache OFBiz Vulnerability Exploited in Attacks
CISA is warning organizations that a second Apache OFBiz flaw is being exploited in the wild shortly after the release of PoC exploits.
The post Second Apache OFBiz Vulnerability Exploited in Attacks appeared first on SecurityWeek.
CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw affecting the Apache OFBiz open-source enterprise resource planning (ERP) system to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.
The vulnerability, known as CVE-2024-38856, carries a CVSS score of 9.8, indicating critical severity.
The vulnerability, known as CVE-2024-38856, carries a CVSS score of 9.8, indicating critical severity.