Attacks delivering the Netwire and Warzone (AveMaria) RATs were employing lures themed around India's National Informatics Centre’s Kavach two-factor authentication application.

The document is aimed at helping federal agencies secure their networks through the use of IPv6.

Support for the TLS 1.0 and 1.1 protocols will be completely removed from the company’s mobile and desktop platforms.

Adversaries used malicious documents targeting the MSHTML vulnerability tracked as CVE-2021-40444 to compromise Russian state rocket center and interior ministry.

The vulnerability could be triggered when the victim opens a malicious WorkSpaces URI from the browser.

Cisco Talos researchers say the backdoor is installed as a service and constantly contacts its command and control (C&C) to receive commands.

The company plans to invest in R&D and personnel, to meet demand for its cloud-based identity solution.

Operating out of Spain and Italy, the organized crime group defrauded hundreds of individuals, making roughly €10 million (approximately $11.7 million) in profits last year alone.

Focused on credential harvesting, attackers have targeted the governments of at least 7 countries since spring 2020, with 15 phishing pages still active.

The service had over 2,000 users and is believed to have been responsible for more than 200,000 distributed denial of service attacks.

The critical security bug was patched last week, when Zoho was already seeing in-the-wild attacks targeting it.