Microsoft patches zero-day actively exploited in string of ransomware attacks
Microsoft said Storm-2460 has exploited the zero-day in the Windows Common Log File System to attack organizations in the U.S., Venezuela, Spain and Saudi Arabia.
Advertisement
Cybercrime
Senators re-up bill to expand Secret Service’s financial cybercrime authorities
The bipartisan legislation would strengthen the agency’s authorities to investigate criminal activity tied to digital assets.
Identity lapses ensnared organizations at scale in 2024
Cisco Talos observed identity-based attacks in 60% of the incidents it responded to last year.
The North Korea worker problem is bigger than you think
The yearslong scheme goes much deeper than contract work, extending to roles beyond traditional IT and sometimes granting the insider threat “keys to the kingdom,” DTEX President…
Canadian citizen allegedly involved in Snowflake attacks consents to extradition to US
Connor Moucka, a 26-year-old arrested at the behest of U.S. authorities in October in Kitchener, Ontario, faces 20 federal charges.
Advertisement
Allie Bohan on how to handle the non-technical side of a ransomware attack
FTI Consulting’s Allie Bohan
Nation-state groups hit hundreds of organizations with Microsoft Windows zero-day
Trend Micro researchers discovered and reported the eight-year-old defect to Microsoft six months ago. The company hasn’t made any commitments to patch or remediate the issue.
Infostealers fueled cyberattacks and snagged 2.1B credentials last year
Inexpensive information-stealing malware surged in 2024, infecting 23 million hosts, according to Flashpoint.
Who is sending those scammy text messages about unpaid tolls?
The latest smishing scam follows a familiar process as ones the industry has seen over the past decade.
Lazarus Group deceives developers with 6 new malicious npm packages
Socket researchers said the malware-ridden packages were collectively downloaded over 330 times. GitHub removed all of the malicious packages Wednesday.
Advertisement