This 0-day flaw, identified by security analysts at ClearSky Cyber Security in June 2024, allows attackers to gain unauthorized access to systems through minimal user interaction.
Category: Malware
Microsoft warns of ransomware attacks on US healthcare | CSO Online
The threat actor borrowed initial access from a third-party infection to effect lateral movement within the victim system and place INC encryption on their network.
6 things hackers know that they don’t want security pros to know that they know | CSO Online
“Hackers know that the average CISO has a lot on their plates and they don’t have enough [resources] to get everything done.
Unpatchable 0-day in surveillance cam is being exploited to install Mirai | Ars Technica
Akamai said that the attackers are exploiting the vulnerability so they can install a variant of Mirai, which arrived in September 2016 when a botnet of infected devices took down cybersecurity news site Krebs on Security.
Watch out — those movie downloads could actually just be vicious new Windows malware | TechRadar
Be careful when looking for pirated movies online – experts have warners many files are out there just to infect your Windows PCs with dangerous malware and infostealers.
The cyberattack cycle: First comes outage, next comes phishing
Threat Actors are quick to try to take advantage of tech issues, much in the same way “repair scammers” jump in after storms cause damage at homes. https://www.securityintelligence.com/news/cyberattack-cycle-first-outage-then-phishing/
FBI takes down ransomware gang that hacked dozens of companies | TechCrunch
The FBI said the Radar/Dispossessor group, led by a ringleader named “Brain,” would exploit security flaws in a victim company’s systems, steal vast amounts of data and scramble the company’s data with encryption.
North Korean hacker got hired by US security vendor, immediately loaded malware | Ars Technica
Personally, I would not want to deal with a Cybersecurity company that apparently has such poor hiring protocols that they let this happen. https://arstechnica.com/tech-policy/2024/07/us-security-firm-unwittingly-hired-apparent-nation-state-hacker-from-north-korea/