Parse notes
Since early 2023, the Akira ransomware has victimized over 250 organizations globally across multiple sectors, receiving over $42 million in ransom payments. Initially targeting Windows, it started infecting VMware ESXi virtual machines in April 2023 and has been deployed with Megazord malware since August 2023.
Frontier Communications has shut down operations after suffering a cyberattack on April 14 that resulted in the theft of PII. Containment efforts involved taking systems offline, leading to material operational disruptions. Frontier disclosed the breach impacted "portions" of its IT environment in an SEC filing but did not provide details on the type of PII accessed or those affected.
Threat actors are exploiting a GitHub flaw to distribute malware through URLs linked to a Microsoft repository, tricking users into thinking the files are safe. This is accomplished by leaving a comment with an uploaded file in a Microsoft repository in GitHub, which uploads the file to GitHub CDN associated with Microsoft's repository, allowing the attacker to make the URLs look more trustworthy. GitHub and Microsoft have been contacted regarding this issue, but the distribution of malware continues through Microsoft's GitHub repository.
This blog dives into server-side template injection, how it can occur, how to identify attempts, and how to set one up. Server-side template injection is when an attacker uses native template syntax to inject a malicious payload into a template, which is then executed server-side.
This blog post explains how to modify and add functionality to a dotnet application by manipulating its binary disassembly. The author demonstrates the process of injecting custom code into the application and reassembling it to create a backdoor. The manual approach described involves working with the disassembled code, adding new instructions, and reassembling the application to achieve the desired modifications without causing errors.
Hackers are targeting cloud apps and identities without touching endpoints. Organizations are at risk due to gaps in securing cloud identities. It is crucial that organizations focus on securing identities to protect services in the cloud effectively.
Sponsored
Join the virtual Cloud Security Capture the Flag Challenge! You'll have one hour to complete as many challenges as possible. Top 3 scorers will win a Valve Steam Deck [10] and all game participants will receive a $25 DoorDash gift card [10] to enjoy lunch after the session.
TrojAI is an AI security platform that allows customers to secure AI models and applications from risks and attacks.
A command-line tool that allows developers to find security vulnerabilities within a Java project using SAST and SCA.
LES is a tool that is designed to check for the exposure of a kernel to known exploits. It can also report on the state of various kernel hardening features.
MagicDot is a set of several critical vulnerabilities in Windows related to path handling. It includes a remote code execution flaw and elevation of privilege flaws involving shadow copy restoration and file deletion, as well as techniques for an unprivileged user to gain rootkit-like abilities. These vulnerabilities stem from how Windows removes trailing dots and spaces during path conversion, permitting malicious path manipulation.
Cybercriminals are exploiting recently patched OpenMetadata vulnerabilities in exposed Kubernetes clusters to illegally mine cryptocurrency using victims' resources. The open-source data organization tool had five flaws fixed in March that allowed authentication bypass and remote code execution if left unpatched.
This article discusses the Fuxnet malware attack by the Blackjack hacking group against Moscollector that targeted Moscow's infrastructure monitoring systems. Initially reported to affect around 500 sensor gateways, recent updates indicate broader impact with 1,700 gateways compromised. The malware destroyed data and disabled network systems, aiming to disrupt emergency services in Moscow by targeting sensor gateways and flooding sensor channels with random data packets.
A French hospital in Cannes had to postpone medical treatments and return to using pen and paper due to a cyberattack.
The history of how cybercrime has evolved into a $1.5 trillion industry over the past decade.
FBI Director Christopher Wray warns about China's increasing threat to U.S. critical infrastructure through hacking operations.