FIN7 Lures Unwitting Security Pros to Carry Out Ransomware Attacks
The infamous Carbanak operator is moving is looking to juice its ransomware game by recruiting IT staff to its fake Bastion Secure ‘pen-testing’
[...]
attacks
Nearly Three-Quarters of Organizations Victimized by DNS Attacks in Past 12 Months
Response and recovery have significant impact on 58% of targeted businesses.
Source: Dark Reading – Threat Intelligence – Nearly Three-Quarters of Organizations
[...]
30 Mins or Less: Rapid Attacks Extort Orgs Without Ransomware
The previously unknown SnapMC group exploits unpatched VPNs and webserver apps to breach systems and carry out quick-hit extortion in less time than
[...]
Smaller 'Bit and Piece' DDoS Attacks Slam Servers to Evade Mitigation Systems
Nearly all DDoS attacks in the first half of 2021 were less than 1 Gbps, Nexusguard found.
Source: Dark Reading – Threat
[...]
Patch 'Immediately': Apache Issues Software Fix as Zero-Day Attacks Pick Up
CISA reports it’s seeing ongoing scanning for the flaws and expects this to accelerate.
Source: Dark Reading – Threat Intelligence – Patch
[...]
Help Might Finally Be on the Way to Fight SIM-Swap Attacks
Plus: A cybersecurity CEO arrest, an Apple Pay hack, and more of the week’s top security news.
Source: Wired – Help Might
[...]
How Does WAF Help in Zero-day Attacks Prevention
Zero-day attacks have been a real pain to organizations these days. Due to the unavailability of patches for such attacks, it becomes difficult
[...]
CISA Observed Raise in Conti Ransomware Attacks Targeting Over 400 U.S. and International Organizations
The investigation report says that the Conti ransomware has been attacked more than 400 times in the U.S. and other international organisations. To
[...]
Netgear SOHO Security Bug Allows RCE, Corporate Attacks
The issue lies in a parental-control function that’s always enabled by default, even if users don’t configure for child security.
Source: Threat
[...]
CISA, FBI, NSA Warn of Increase in Conti Ransomware Attacks
A new alert provides the technical details of ongoing attacks and guidance for organizations to secure systems against Conti.
Source: Dark Reading
[...]