Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
|
2022-11-18 14:15:00 |
Emerging Threat Actor DEV-0569 Expands Its Toolkit to Deliver Royal Ransomware (lien direct) |
As well as malvertising and phishing links, the new threat actor is now also using contact forms to deliver its payloads, found Microsoft |
Ransomware
Threat
|
|
|
|
2022-11-17 10:10:00 |
US: Iranian Hackers Breached Government with Log4Shell (lien direct) |
Threat actors installed crypto-miner and achieved persistence |
Threat
|
|
|
|
2022-11-14 10:45:00 |
Mass Email Extortion Campaign Claims Server Hack (lien direct) |
Threat actors claim they'll destroy victims' reputation if they don't pay |
Hack
Threat
|
|
|
|
2022-11-11 10:30:00 |
Qatar World Cup Firms Urged to Upgrade Cyber-Threat Model (lien direct) |
Digital Shadows warns of elevated risk from scammers and threat actors |
Threat
|
|
|
|
2022-11-10 16:00:00 |
Majority of Security Managers Lack Threat Intelligence Skills (lien direct) |
The report suggests threat intelligence is a crucial source for vulnerability detection |
Vulnerability
Threat
|
|
★★★★
|
|
2022-11-10 15:45:00 |
The \'Great Resignation\' Caused Insider Threats to Peak in Q3 2022, Kroll Finds (lien direct) |
Kroll's Q3 2022 Threat Landscape report showed an unprecedented increase in insider threats |
Threat
|
|
★★★★★
|
|
2022-11-04 17:00:00 |
Black Basta Ransomware Attacks Linked to FIN7 Threat Actor (lien direct) |
The hacker behind a tool used by Black Basta had access to the source code used by FIN7 |
Ransomware
Tool
Threat
|
|
|
|
2022-11-03 17:00:00 |
Cyber Threat Landscape Shaped by Ukraine Conflict, ENISA Report Reveals (lien direct) |
The EU cybersecurity agency released its 10th annual threat landscape report on November 3, 2022 |
Threat
|
|
|
|
2022-11-01 16:00:00 |
CISA Publishes Multi-Factor Authentication Guidelines to Tackle Phishing (lien direct) |
The guidelines describe methods threat actors use to steal MFA credentials and how to defend against them |
Threat
|
|
|
|
2022-11-01 15:00:00 |
LockBit Dominates Ransomware Campaigns in 2022: Deep Instinct (lien direct) |
The figures come from the 2022 Interim Cyber Threat Report by Deep Instinct |
Ransomware
Threat
|
|
|
|
2022-10-27 17:00:00 |
Kiss-a-Dog Cryptojacking Campaign Targets Docker and Kubernetes (lien direct) |
The threat actors also utilized user and kernel mode rootkits to hide the activity |
Threat
|
Uber
|
|
|
2022-10-26 09:45:00 |
Ransomware Threat Shifts from US to EMEA and APAC (lien direct) |
SonicWall figures show overall attacks trending down |
Threat
|
|
|
|
2022-10-21 13:10:00 |
NCSC CEO Calls for International Standards on IoT Security (lien direct) |
Lindy Cameron argues that smart cities are becoming an attractive target for threat actors, including nation states |
Threat
|
|
|
|
2022-10-20 09:00:00 |
NCSC Updates Early Warning Threat Intelligence (lien direct) |
UK security agency makes it easier to assess credibility of alerts |
Threat
|
|
|
|
2022-10-17 15:00:00 |
Ransom Cartel Linked to Russia-Based REvil Ransomware Group (lien direct) |
The collection became increasingly clear through the tools used by both threat actors |
Ransomware
Threat
|
|
|
|
2022-10-07 16:02:00 |
RCE on Log4j Among Top CVEs Exploited By Chinese-Backed Hackers (lien direct) |
In a joint advisory, three US agencies, NSA, CISA and FBI, warned about Chinese threat actors |
Threat
|
|
|
|
2022-10-06 17:00:00 |
(Déjà vu) FBI and CISA Publish Advisory on Malicious Cyber Activity Against Election Infrastructure (lien direct) |
Threat actors trying to compromise elections are unlikely to result in large-scale disruptions |
Threat
|
|
|
|
2022-09-29 10:00:00 |
Mobile, Cloud and Email Are Top Threat Vectors For 2023 (lien direct) |
PwC study finds organizations have a long way to go on security |
Threat
|
|
|
|
2022-09-28 17:00:00 |
WatchGuard Report: Malware Decreases but Encrypted Malware Up in Q2 2022 (lien direct) |
This could reflect threat actors shifting their tactics to rely on more elusive malware |
Malware
Threat
|
|
|
|
2022-09-20 15:30:00 |
Grand Theft Auto Publisher Rockstar Games Hacked (lien direct) |
The threat actor 'teapotuberhacker' could be linked to the Lapsus$ hacking group |
Threat
|
Uber
|
|
|
2022-09-20 08:40:00 |
Uber Blames Lapsus$ for Breach (lien direct) |
Threat actor bombarded Uber contractor with 2FA requests |
Threat
|
Uber
Uber
|
|
|
2022-09-12 17:00:00 |
US Treasury Sanctions Iranian Minister Over Hacking of Govt and Allies (lien direct) |
Iran would have directed several networks of cyber threat actors in support of its political goals |
Threat
|
|
|
|
2022-09-08 13:20:00 |
Researchers Reveal New Iranian Threat Group APT42 (lien direct) |
Group has been active since at least 2015 |
Threat
|
APT 42
|
|
|
2022-09-06 12:00:00 |
Half of Firms Report Supply Chain Ransomware Compromise (lien direct) |
Study highlights threat detection challenge for many organizations |
Ransomware
Threat
|
|
|
|
2022-09-02 11:00:00 |
New Ransomware Group BianLian Activity Exploding (lien direct) |
The threat actor using the common Go programming language and a custom toolkit claims twenty victims |
Ransomware
Threat
|
|
|
|
2022-08-23 16:30:00 |
CISA Adds Palo Alto Networks\' PAN-OS Vulnerability to Catalog (lien direct) |
The flaw would allow a network-based unauthenticated threat actor to perform DoS attacks |
Vulnerability
Threat
|
|
|
|
2022-08-11 11:00:00 |
#BHUSA: New Open Source Group Set to Streamline Threat Detection (lien direct) |
New open source project set to reduce operational pain for SecOps analysts |
Threat
|
|
|
|
2022-08-10 17:30:00 |
DeathStalker\'s VileRAT Continues to Target Foreign and Crypto Exchanges (lien direct) |
The campaign is not only ongoing, the threat actors increased its efforts to compromise targets using VileRAT |
Threat
|
|
|
|
2022-08-03 10:00:00 |
T-Mobile Retailer Guilty of $25m Fraud Scheme (lien direct) |
Case highlights continued threat from social engineering |
Threat
|
|
|
|
2022-07-28 10:00:00 |
Hackers Change Tactics for New Post-Macro Era (lien direct) |
Microsoft announcement forced threat actors to adapt once again |
Threat
|
|
|
|
2022-07-27 10:00:00 |
US Doubles Reward for Info on North Korean Hackers (lien direct) |
State Department hopes financial inducement will unmask threat actors |
Threat
|
|
|
|
2022-07-22 08:55:00 |
PayPal Used to Send Malicious “Double Spear” Invoices (lien direct) |
Threat actors combine techniques to trick users |
Threat
|
|
|
|
2022-07-15 15:08:00 |
North Korean Threat Actor Targeting SME Businesses with Ransomware (lien direct) |
The group, going by the name H0lyGh0st, has been developing and conducting cross-national malware attacks for over a year |
Ransomware
Malware
Threat
|
|
|
|
2022-07-15 13:37:00 |
Falling Cryptocurrency Market Stalling Cybercrime Activity (lien direct) |
Falling cryptocurrency prices are making it harder for threat actors to monetize their attacks |
Threat
|
|
|
|
2022-07-08 15:30:00 |
Disneyland\'s Instagram and Facebook Accounts Hacked to Show Racist Content (lien direct) |
The threat actor claimed he was seeking “revenge” on Disneyland employees |
Threat
|
|
|
|
2022-07-07 09:05:00 |
FBI and MI5 Bosses Warn of “Massive” China Threat (lien direct) |
Unprecedented joint press conference signals urgent need to act |
Threat
|
|
|
|
2022-07-06 17:15:00 |
North Korean Hackers Target US Health Providers With \'Maui\' Ransomware (lien direct) |
According to CISA, the threat actors have been engaging in these campaigns since May 2021 |
Ransomware
Threat
|
|
|
|
2022-07-06 09:00:00 |
NCSC: Prepare for Protected Period of Heightened Cyber Risk (lien direct) |
Agency warns Russian threat will remain elevated for a long time |
Threat
|
|
|
|
2022-06-28 17:00:00 |
Nearly One Million Misconfigured Kubernetes Exposed That Could Cause Data Breaches (lien direct) |
Misconfiguration practices might make companies lucrative targets for threat actors |
Threat
|
Uber
|
|
|
2022-06-23 14:52:00 |
#InfosecurityEurope2022: The NCSC Sets Out the UK\'s Cyber Threat Landscape (lien direct) |
Marsha Quallo-Wright, deputy director for critical national infrastructure at the NCSC, discusses the latest cyber threat trends impacting the UK |
Threat
|
|
|
|
2022-06-23 09:40:00 |
Cloud Email Threats Soar 101% in a Year (lien direct) |
Experts warn of evolving social engineering techniques |
Threat
|
|
★★★★★
|
|
2022-06-21 18:30:00 |
#InfosecurityEurope2022 Firms Face Emerging Threats as Bad Actors Evade Defenses (lien direct) |
The cyber-threat landscape continues to evolve at a breakneck pace |
Threat
|
|
|
|
2022-06-21 15:30:00 |
New DFSCoerce NTLM Relay Attack Enables Hackers to Perform Windows Domain Takeover (lien direct) |
Assuming the identity of a domain, threat actors could then execute arbitrary commands |
Threat
|
|
|
|
2022-06-20 15:30:00 |
BRATA Android Malware Group Now Classified As Advanced Persistent Threat (lien direct) |
BRATA now targeting a specific financial institution at a time |
Malware
Threat
|
|
|
|
2022-06-09 22:00:00 |
#RSAC: Plain Language Threat Modeling for DevSecOps (lien direct) |
Alyssa Miller claimed that capturing threat information in plain language in the user-story breaks through roadblocks |
Threat
|
|
|
|
2022-06-09 21:00:00 |
#RSAC: NSA Outlines Threats from Russia, China and Ransomware (lien direct) |
NSA's director of cybersecurity describes recent threat activity during the RSA Conference 2022 |
Ransomware
Threat
|
|
|
|
2022-06-09 19:00:00 |
#RSAC: Lessons Learned From the Solarwinds Sunburst Attack (lien direct) |
A panel discussion explained that businesses must transform in order to meet the cyber threats of tomorrow |
Threat
|
Solardwinds
|
|
|
2022-06-09 00:20:00 |
#RSAC: Current Nation-State and Ransomware Gang Threat Trends (lien direct) |
Current cyber activities and future trends from criminal and nation-state actors was set out during a session at RSA 2022 |
Ransomware
Threat
|
|
|
|
2022-05-30 08:33:00 |
Mobile Threat Volumes Slump 58% in a Year (lien direct) |
App stores a hotbed of malicious activity, Kaspersky warns |
Threat
|
|
|
|
2022-05-26 08:00:00 |
State of Cybersecurity Report 2022 Names Ransomware and Nation-State Attacks As Biggest Threats (lien direct) |
Ransomware, nation-state attacks, and supply chains were cited as the biggest threats in the Infosecurity Group's annual report |
Ransomware
Threat
|
|
|