More results...
A new report from Rapid7 says a ransomware gang like Cl0p would easily be able to afford a bevy of zero-day exploits for vulnerable enterprise software.
The post Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage Expands appeared first on Sec…
Threat actors have been observed deploying a proxy application on Windows and macOS systems that were infected with malware.
The post Thousands of Systems Turned Into Proxy Exit Nodes via Malware appeared first on SecurityWeek.
A threat actor has exploited a recent Citrix vulnerability (CVE-2023-3519) to infect roughly 2,000 NetScaler instances with a backdoor.
The post 2,000 Citrix NetScaler Instances Backdoored via Recent Vulnerability appeared first on SecurityWeek.
Hudson Rock security researchers have identified credentials for hacker forums on roughly 120,000 computers infected with information stealers.
The post Hacker Forum Credentials Found on 120,000 PCs Infected With Info-Stealer Malware appeared first on …
Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of August 7, 2023.
The post In Other News: macOS Security Reports, Keyboard Spying, VPN Vulnerabilities appeared first …
Threat actors have been observed abusing the open source Cloudflare Tunnel tool Cloudflared to maintain stealthy, persistent access to compromised systems.
The post Threat Actors Abuse Cloudflare Tunnel for Persistent Access, Data Theft appeared first …
A new macOS-targeting hVNC malware family is being advertised on a prominent cybercrime forum.
The post New hVNC macOS Malware Advertised on Hacker Forum appeared first on SecurityWeek.
The recently patched Ivanti EPMM zero-day CVE-2023-35078 has been exploited to hack the Norwegian government since at least April 2023.
The post Ivanti Zero-Day Exploited by APT Since at Least April in Norwegian Government Attack appeared first on Se…
Ivanti EPMM customers have been warned of CVE-2023-35081, a second zero-day vulnerability that has been exploited in targeted attacks.
The post Second Ivanti EPMM Zero-Day Vulnerability Exploited in Targeted Attacks appeared first on SecurityWeek.
CISA has shared analysis reports on three malware families obtained from an organization hacked via a recent Barracuda ESG vulnerability.
The post CISA Analyzes Malware Used in Barracuda ESG Attacks appeared first on SecurityWeek.