Security Experts:
Ionut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Recent articles by Ionut Arghire
-
Active for at least two years, the threat actor switched from PowerShell Empire to using the Koadic and Octopus RATs.
-
The jet manufacturer has confirmed the compromise of information relating to employees, customers and suppliers.
-
Vietnam-linked threat actor Ocean Lotus sent spyware-carrying emails to activists both in and outside the country.
-
The social platform associated the accounts with state-sponsored actors operating out of Armenia, Iran, and Russia.
-
Mozilla announced improved user privacy in Firefox 86, with the introduction of a new feature aimed at preventing the tracking of users from site to site.
-
On par with prolific crimeware gangs, the group is noisy and lacks the techniques observed in advanced operations.
-
Transport for NSW and NSW Health said some information was taken during the cyber-attack.
-
Without enough evidence for full attribution, the intrusion and extortion activities are tracked separately.
-
APT31 managed to capture and clone the Equation Group’s exploit for CVE-2017-0005 three years before Shadow Brokers’ “Lost in Translation” leak.
-
The retail company is now notifying potentially impacted customers and associates of the incident.
-
The vulnerability has been abused in North Korean attacks targeting security researchers.
-
The company plans to retire the 20-year-old legacy large file transfer service FTA on April 30, 2021.
-
Researchers have analyzed the patterns of more than 1.2 billion email-based phishing and malware attacks targeting Gmail users, and found that most attacks campaigns are short-lived and sent to fewer than 1,000 targets.
-
The U.S. Department of Justice secures a seven-year prison sentence for a Ukrainian man running a lucrative money-mule laundering scheme.
-
Forescout researchers warn that improperly generated ISNs (Initial Sequence Numbers) leave TCP connections exposed to malicious hacker attacks.
-
The company plans to expand its operations to the United States and Europe.
-
The surveillanceware, Hornbill and SunBird, targeted Pakistan military, nuclear authorities, and Indian election officials.
-
The 30 analyzed apps expose sensitive data such as protected health information (PHI) and personally identifiable information (PII).
-
The company addressed two other vulnerabilities in its desktop operating system.
-
The code injection vulnerability could allow remote attackers to execute arbitrary code.
-
A researcher discovered that 35 organizations can be breached through Python, Ruby, and JavaScript dependencies.
-
The security flaws could be abused for remote code execution and cross-site scripting (XSS) attacks.
-
A misconfiguration resulted in a database containing technical logs being publicly accessible for more than two weeks.
-
Following a two-year downtime, an Iran-linked cyberespionage operation has recommenced with new second-stage malware and with an updated variant of the Infy malware.
-
The document details the most common ransomware attack methods, as well as prevention and mitigation techniques.
Get the Daily Briefing
- Google Discloses Details of Remote Code Execution Vulnerability in Windows
- Washington Senate OKs Measure Creating State Office of Cybersecurity
- PerimeterX Banks $57 Million for Bot Protection Expansion
- GitHub Hires Mike Hanley as Chief Security Officer
- Webinar Today: Evaluating Vendor Risk With Security Ratings
- New 'LazyScripter' Hacking Group Targets Airlines
- Four Additional Threat Groups Seen Targeting Industrial Organizations in 2020
- Hackers Leak Data Stolen From Jet Maker Bombardier
- Vietnamese Hackers Target Human Rights Defenders: Amnesty
- Twitter Shuts Down Four Networks of State-Sponsored Disinformation Accounts
Copyright © 2021 Wired Business Media. All Rights Reserved. Privacy Policy