CISA to brief critical infrastructure companies about urgent new Log4j vulnerability
Log4j is a widely-used open-source logging tool popular in apps including Minecraft, Apple Cloud, Cloudflare and Twitter.
Advertisement
EternalBlue
TrickBot adds firmware tool that researchers say could lead to ‘bricking’ devices
A TrickBot add-on module's power to destroy devices is more than theoretical, Eclypsium and Advintel said.
Windows 7 end-of-life is coming. How much should you worry?
Ultimately, it is a conversation about risk, and more specifically, how much risk is an organization willing to assume.
Criminal campaign uses leaked NSA tools to set up cryptomining scheme, Trend Micro says
The research is a reminder that it is not just state-sponsored hackers that have reportedly co-opted the leaked NSA tools.
Sen. Van Hollen: Government sees no EternalBlue in Baltimore ransomware attack
The senator's comments add to a growing consensus.
Ruppersberger: NSA has no evidence EternalBlue was in Baltimore attack
Rep. Dutch Ruppersberger was told by the NSA that EternalBlue was not a part of the Baltimore ransomware attack, the congressman said Friday.
Advertisement
NSA points to two-year patching window in remarks about Baltimore incident
Rob Joyce said Thursday there is no “indefensible” nation-state-built tool that is responsible for the spread of ransomware.
Newly uncovered ‘Leafminer’ hacking group hitting wide array of Middle Eastern targets
The newly uncovered group uses a mix of custom and publicly available malware tools to breach targets in order to steal data.
The fear over WannaCry is still very real
The incident at Boeing looks like a tempest in a teapot. But the sting of WannaCry will be with us for years to come.
Another well-known hacking group using leaked NSA hacking tools
Most of the tools used by Chafer, including SMB hacking tools like EternalBlue, were stolen from the NSA and are freely available on the public internet.