Free Decryptor Released for BitLocker-Based ShrinkLocker Ransomware Victims Romanian cybersecurity company Bitdefender has released a free decryptor to help victims recover data encrypted using the ShrinkLocker ransomware. The decryptor is the result of a comprehensive analysis of ShrinkLocker’s inner workings, allowing the researchers to discover a “specific window of opportunity Read more…
Iranian Hackers Use "Dream Job" Lures to Deploy SnailResin Malware in Aerospace Attacks The Iranian threat actor known as TA455 has been observed taking a leaf out of a North Korean hacking group’s playbook to orchestrate its own version of the Dream Job campaign targeting the aerospace industry by offering Read more…
Comprehensive Guide to Building a Strong Browser Security Program The rise of SaaS and cloud-based work environments has fundamentally altered the cyber risk landscape. With more than 90% of organizational network traffic flowing through browsers and web applications, companies are facing new and serious cybersecurity threats. These include phishing attacks, Read more…
OvrC Platform Vulnerabilities Expose IoT Devices to Remote Attacks and Code Execution A security analysis of the OvrC cloud platform has uncovered 10 vulnerabilities that could be chained to allow potential attackers to execute code remotely on connected devices. “Attackers successfully exploiting these vulnerabilities can access, control, and disrupt devices Read more…
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager (NTLM) and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among the 90 security bugs the tech giant Read more…
Amazon confirms data breached as MOVEit strikes again • The Register Amazon employees’ data is part of a stolen trove posted to a cybercrime forum linked to last year’s MOVEit vulnerability. “Amazon and AWS systems remain secure, and we have not experienced a security event,” a spokesperson told The Register. Read more…
‘Top 10’ malware strain, Remcos RAT, now exploiting Microsoft Excel files A new phishing campaign that exploits a high-severity bug from 2017 has been discovered in the wild spreading a new variant of the Remcos remote access trojan (RAT), which was among the Top Ten malware strains of 2021. In Read more…
Toward greater transparency: Publishing machine-readable CSAF files | MSRC Blog Welcome to the third installment in our series on transparency at the Microsoft Security Response Center (MSRC). In this ongoing discussion, we talk about our commitment to providing comprehensive vulnerability information to our customers. At MSRC, our mission is Read more…
U.S. May Support ‘Global Surveillance’ Treaty Hated by Everyone but Authoritarian Governments The U.S. will support an international cybercrimes treaty that a broad coalition of businesses and human rights groups have warned will weaken global cybersecurity and make it easier for authoritarian regimes to spy on and prosecute their citizens, Read more…
New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns Cybersecurity researchers are calling attention to a new sophisticated tool called GoIssue that can be used to send phishing messages at scale targeting GitHub users. The program, first marketed by a threat actor named cyberdluffy (aka Cyber D’ Luffy) Read more…