TechPosts filtered by tags: Ravie Lakshmanan[x]
PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S.August 2, 2021 at 8:03 AM Cybersecurity researchers on Monday disclosed a set of nine vulnerabilities known as "PwnedPiper" that left a widely-used pneumatic tube system (PTS) vulnerable to critical attacks, including a possibility of complete takeover.
The security weaknesses, disclosed by American cybersecurity firm Armis, impact the Translogic PTS system by Swisslog Healthcare, which is installed in about 80% of all [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Armis, Swisslog Healthcare, Ravie Lakshmanan, Translogic PTS 6 people like this. Like New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET ExploitsAugust 2, 2021 at 7:11 AM A new highly capable and persistent threat actor has been targeting major high-profile public and private entities in the U.S. as part of a series of targeted cyber intrusion attacks by exploiting internet-facing Microsoft Internet Information Services (IIS) servers to infiltrate their networks.
Israeli cybersecurity firm Sygnia, which identified the campaign, is tracking the advanced, stealthy [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Ravie Lakshmanan, Microsoft IIS Servers, Microsoft Internet Information Services IIS 41 people like this. Like PyPI Python Package Repository Patches Critical Supply Chain FlawAugust 2, 2021 at 6:50 AM The maintainers of Python Package Index (PyPI) last week issued fixes for three vulnerabilities, one among which could be abused to achieve arbitrary code execution and take full control of the official third-party software repository.
The security weaknesses were discovered and reported by Japanese security researcher RyotaK, who in the past has disclosed critical vulnerabilities in the [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Ravie Lakshmanan, RyotaK 39 people like this. Like Solarmarker InfoStealer Malware Once Again Making its Way Into the WildAugust 2, 2021 at 6:07 AM Healthcare and education sectors are the frequent targets of a new surge in credential harvesting activity from what's a "highly modular" .NET-based information stealer and keylogger, charting the course for the threat actor's continued evolution while simultaneously remaining under the radar.
Dubbed "Solarmarker," the malware campaign is believed to be active since September 2020, with [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Healthcare, Ravie Lakshmanan 24 people like this. Like Experts Uncover Several C&C Servers Linked to WellMess MalwareJuly 30, 2021 at 6:00 AM Cybersecurity researchers on Friday unmasked new command-and-control (C2) infrastructure belonging to the Russian threat actor tracked as APT29, aka Cozy Bear, that has been spotted actively serving WellMess malware as part of an ongoing attack campaign.
More than 30 C2 servers operated by the Russian foreign intelligence have been uncovered, Microsoft-owned cybersecurity subsidiary RiskIQ said [Author: [email protected] (Ravie Lakshmanan)]Tags: Microsoft, Tech, Ravie Lakshmanan 22 people like this. Like Several Malicious Typosquatted Python Libraries Found On PyPI RepositoryJuly 30, 2021 at 4:18 AM As many as eight Python packages that were downloaded more than 30,000 times have been removed from the PyPI portal for containing malicious code, once again highlighting how software package repositories are evolving into a popular target for supply chain attacks.
"Lack of moderation and automated security controls in public software repositories allow even inexperienced attackers to use them [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Ravie Lakshmanan 15 people like this. Like Phony Call Centers Tricking Users Into Installing Ransomware and Data-StealersJuly 30, 2021 at 3:49 AM An ongoing malicious campaign that employs phony call centers has been found to trick victims into downloading malware capable of data exfiltration as well as deploying ransomware on infected systems.
The attacks — dubbed "BazaCall" — eschew traditional social engineering techniques that rely on rogue URLs and malware-laced documents in favor of a vishing-like method wherein targeted users are [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Ravie Lakshmanan 2 people like this. Like A New Wiper Malware Was Behind Recent Cyberattack On Iranian Train SystemJuly 30, 2021 at 3:36 AM A cyber attack that derailed websites of Iran's transport ministry and its national railway system earlier this month, causing widespread disruptions in train services, was the result of a never-before-seen reusable wiper malware called "Meteor."
The campaign — dubbed "MeteorExpress" — has not been linked to any previously identified threat group or to additional attacks, making it the first [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Iran, Ravie Lakshmanan 20 people like this. Like Hackers Exploit Microsoft Browser Bug to Deploy VBA Malware on Targeted PCsJuly 29, 2021 at 11:18 AM An unidentified threat actor has been exploiting a now-patched zero-day flaw in Internet Explorer browser to deliver a fully-featured VBA-based remote access trojan (RAT) capable of accessing files stored in compromised Windows systems, and downloading and executing malicious payloads as part of an "unusual" campaign.
The backdoor is distributed via a decoy document named "Manifest.docx" that [Author: [email protected] (Ravie Lakshmanan)]Tags: Microsoft, Tech, VBA, Ravie Lakshmanan 48 people like this. Like New Ransomware Gangs — Haron and BlackMatter — Emerge on Cybercrime ForumsJuly 29, 2021 at 6:09 AM Two new ransomware-as-service (RaaS) programs have appeared on the threat radar this month, with one group professing to be a successor to DarkSide and REvil, the two infamous ransomware syndicates that went off the grid following major attacks on Colonial Pipeline and Kaseya over the past few months.
"The project has incorporated in itself the best features of DarkSide, REvil, and LockBit," the [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Haron, Kaseya, Ravie Lakshmanan 12 people like this. Like New Android Malware Uses VNC to Spy and Steal Passwords from VictimsJuly 29, 2021 at 4:46 AM A previously undocumented Android-based remote access trojan (RAT) has been found to use screen recording features to steal sensitive information on the device, including banking credentials, and open the door for on-device fraud.
Dubbed "Vultur" due to its use of Virtual Network Computing (VNC)'s remote screen-sharing technology to gain full visibility on targeted users, the mobile malware was [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Vnc, Ravie Lakshmanan 13 people like this. Like Top 30 Critical Security Vulnerabilities Most Exploited by HackersJuly 29, 2021 at 4:21 AM Intelligence agencies in Australia, the U.K., and the U.S. issued a joint advisory on Wednesday detailing the most exploited vulnerabilities in 2020 and 2021, once again demonstrating how threat actors are able to weaponize publicly disclosed flaws to their advantage swiftly.
"Cyber actors continue to exploit publicly known—and often dated—software vulnerabilities against broad target sets, [Author: [email protected] (Ravie Lakshmanan)]Tags: Australia, Tech, Ravie Lakshmanan 34 people like this. Like UBEL is the New Oscorp — Android Credential Stealing Malware Active in the WildJuly 28, 2021 at 11:39 AM An Android malware that was observed abusing accessibility services in the device to hijack user credentials from European banking applications has morphed into an entirely new botnet as part of a renewed campaign that began in May 2021.
Italy's CERT-AGID, in late January, disclosed details about Oscorp, a mobile malware developed to attack multiple financial targets with the goal of stealing [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Italy, Oscorp, Ravie Lakshmanan, UBEL 29 people like this. Like Chinese Hackers Implant PlugX Variant on Compromised MS Exchange ServersJuly 28, 2021 at 6:58 AM A Chinese cyberespionage group known for targeting Southeast Asia leveraged flaws in the Microsoft Exchange Server that came to light earlier this March to deploy a previously undocumented variant of a remote access trojan (RAT) on compromised systems.
Attributing the intrusions to a threat actor named PKPLUG (aka Mustang Panda and HoneyMyte), Palo Alto Networks' Unit 42 threat intelligence team [Author: [email protected] (Ravie Lakshmanan)]Tags: Microsoft, Southeast Asia, Tech, Ravie Lakshmanan, Mustang Panda, HoneyMyte Palo Alto Networks Unit 1 people like this. Like Hackers Posed as Aerobics Instructors for Years to Target Aerospace EmployeesJuly 28, 2021 at 6:06 AM An Iranian cyberespionage group masqueraded as an aerobics instructor on Facebook in an attempt to infect the machine of an employee of an aerospace defense contractor with malware as part of years-long social engineering and targeted malware campaign.
Enterprise security firm Proofpoint attributed the covert operation to a state-aligned threat actor it tracks as TA456, and by the wider [Author: [email protected] (Ravie Lakshmanan)]Tags: Facebook, Tech, Proofpoint, Ravie Lakshmanan 39 people like this. Like Hackers Turning to 'Exotic' Programming Languages for Malware DevelopmentJuly 28, 2021 at 4:50 AM Threat actors are increasingly shifting to "exotic" programming languages such as Go, Rust, Nim, and Dlang that can better circumvent conventional security protections, evade analysis, and hamper reverse engineering efforts.
"Malware authors are known for their ability to adapt and modify their skills and behaviors to take advantage of newer technologies," said Eric Milam, Vice President of [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Ravie Lakshmanan, Eric Milam, Dlang 37 people like this. Like Several Bugs Found in 3 Open-Source Software Used by Several BusinessesJuly 27, 2021 at 11:47 AM Cybersecurity researchers on Tuesday disclosed nine security vulnerabilities affecting three open-source projects — EspoCRM, Pimcore, and Akaunting — that are widely used by several small to medium businesses and, if successfully exploited, could provide a pathway to more sophisticated attacks.
All the security flaws in question, which impact EspoCRM v6.1.6, Pimcore Customer Data Framework [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Ravie Lakshmanan, Pimcore Customer Data Framework 24 people like this. Like New Bug Could Let Attackers Hijack Zimbra Server by Sending Malicious EmailJuly 27, 2021 at 11:46 AM Cybersecurity researchers have discovered multiple security vulnerabilities in Zimbra email collaboration software that could be potentially exploited to compromise email accounts by sending a malicious message and even achieve a full takeover of the mail server when hosted on a cloud infrastructure.
The flaws — tracked as CVE-2021-35208 and CVE-2021-35208 — were discovered and reported in [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Zimbra, Ravie Lakshmanan 21 people like this. Like Apple Releases Urgent 0-Day Bug Patch for Mac, iPhone and iPad DevicesJuly 27, 2021 at 7:14 AM Apple on Monday rolled out an urgent security update for iOS, iPadOS, and macOS to address a zero-day flaw that it said may have been actively exploited, making it the thirteenth such vulnerability Apple has patched since the start of this year.
The updates, which arrive less than a week after the company released iOS 14.7, iPadOS 14.7, and macOS Big Sur 11.5 to the public, fixes a memory [Author: [email protected] (Ravie Lakshmanan)]Tags: Apple, Tech, Ravie Lakshmanan 50 people like this. Like Microsoft Warns of LemonDuck Malware Targeting Windows and Linux SystemsJuly 26, 2021 at 6:13 AM An infamous cross-platform crypto-mining malware has continued to refine and improve upon its techniques to strike both Windows and Linux operating systems by setting its sights on older vulnerabilities, while simultaneously latching on to a variety of spreading mechanisms to maximize the effectiveness of its campaigns.
"LemonDuck, an actively updated and robust malware that's primarily known [Author: [email protected] (Ravie Lakshmanan)]Tags: Microsoft, Tech, Ravie Lakshmanan 43 people like this. Like New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows DomainsJuly 26, 2021 at 4:04 AM A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticate with a malicious destination, thereby allowing an adversary to stage an NTLM relay attack and completely take over a Windows domain.
The issue, dubbed "PetitPotam," was discovered by security researcher Gilles Lionel, who shared [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Ravie Lakshmanan, Gilles Lionel 40 people like this. Like Dutch Police Arrest Two Hackers Tied to "Fraud Family" Cybercrime RingJuly 23, 2021 at 8:58 AM Law enforcement authorities in the Netherlands have arrested two alleged individuals belonging to a Dutch cybercriminal collective who were involved in developing, selling, and renting sophisticated phishing frameworks to other threat actors in what's known as a "Fraud-as-a-Service" operation.
The apprehended suspects, a 24-year-old software engineer and a 15-year-old boy, are said to have been [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Service, Netherlands, Ravie Lakshmanan 12 people like this. Like Nasty macOS Malware XCSSET Now Targets Google Chrome, Telegram SoftwareJuly 23, 2021 at 8:22 AM A malware known for targeting macOS operating system has been updated once again to add more features to its toolset that allows it to amass and exfiltrate sensitive data stored in a variety of apps, including apps such as Google Chrome and Telegram, as part of further "refinements in its tactics."
XCSSET was uncovered in August 2020, when it was found targeting Mac developers using an unusual [Author: [email protected] (Ravie Lakshmanan)]Tags: Google, Tech, Ravie Lakshmanan 29 people like this. Like Kaseya Gets Universal Decryptor to Help REvil Ransomware VictimsJuly 23, 2021 at 12:40 AM Nearly three weeks after Florida-based software vendor Kaseya was hit by a widespread supply-chain ransomware attack, the company on Thursday said it obtained a universal decryptor to unlock systems and help customers recover their data.
"On July 21, Kaseya obtained a decryptor for victims of the REvil ransomware attack, and we're working to remediate customers impacted by the [Author: [email protected] (Ravie Lakshmanan)]Tags: Florida, Tech, Kaseya, Ravie Lakshmanan 13 people like this. Like APT Hackers Distributed Android Trojan via Syrian e-Government PortalJuly 22, 2021 at 6:38 AM An advanced persistent threat (APT) actor has been tracked in a new campaign deploying Android malware via the Syrian e-Government Web Portal, indicating an upgraded arsenal designed to compromise victims.
"To the best of our knowledge, this is the first time that the group has been publicly observed using malicious Android applications as part of its attacks," Trend Micro researchers Zhengyu [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Ravie Lakshmanan, Syrian e Government Portal 12 people like this. Like Oracle Warns of Critical Remotely Exploitable Weblogic Server FlawsJuly 22, 2021 at 4:21 AM Oracle on Tuesday released its quarterly Critical Patch Update for July 2021 with 342 fixes spanning across multiple products, some of which could be exploited by a remote attacker to take control of an affected system.
Chief among them is CVE-2019-2729, a critical deserialization vulnerability via XMLDecoder in Oracle WebLogic Server Web Services that's remotely exploitable without [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Ravie Lakshmanan 28 people like this. Like Another Hacker Arrested for 2020 Twitter Hack and Massive Bitcoin ScamJuly 22, 2021 at 4:04 AM A U.K. citizen has been arrested in the Spanish town of Estepona over his alleged involvement in the July 2020 hack of Twitter, resulting in the compromise of 130 high-profile accounts.
Joseph O'Connor, 22, has been charged with intentionally accessing a computer without authorization and obtaining information from a protected computer, as well as for making extortive communications. The Spanish [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Joseph O Connor, Estepona, Ravie Lakshmanan 50 people like this. Like Malicious NPM Package Caught Stealing Users' Saved Passwords From BrowsersJuly 21, 2021 at 11:14 AM A software package available from the official NPM repository has been revealed to be actually a front for a tool that's designed to steal saved passwords from the Chrome web browser.
The package in question, named "nodejs_net_server" and downloaded over 1,283 times since February 2019, was last updated seven months ago (version 1.1.2), with its corresponding repository leading to non-existent [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, NPM, Ravie Lakshmanan 8 people like this. Like XLoader Windows InfoStealer Malware Now Upgraded to Attack macOS SystemsJuly 21, 2021 at 6:12 AM Cybersecurity researchers on Wednesday disclosed details of an evolving malware that has now been upgraded to steal sensitive information from Apple's macOS operating system.
The malware, dubbed "XLoader," is a successor to another well-known Windows-based info stealer called Formbook that's known to vacuum credentials from various web browsers, collect screenshots, log keystrokes, and download [Author: [email protected] (Ravie Lakshmanan)]Tags: Apple, Tech, Ravie Lakshmanan 8 people like this. Like Several New Critical Flaws Affect CODESYS Industrial Automation SoftwareJuly 21, 2021 at 6:02 AM Cybersecurity researchers on Wednesday disclosed multiple security vulnerabilities impacting CODESYS automation software and the WAGO programmable logic controller (PLC) platform that could be remotely exploited to take control of a company's cloud operational technology (OT) infrastructure.
The flaws can be turned "into innovative attacks that could put threat actors in position to remotely [Author: [email protected] (Ravie Lakshmanan)]Tags: Tech, Wago, Ravie Lakshmanan 21 people like this. Like |
Filters Microsoft show more filters Kaseya China Russia Texas Middle East VSA Vpn Australia SolarWinds Serv U Proofpoint Spain Florida US Cyberspace Administration of China CAC Europe Kaspersky Iran SonicWall Healthcare Mustang Panda Netherlands HP Samsung Xerox Printers Golang Myanmar Target U S Defense Firms Feb Conti VBA |
|
|
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||