May 2021

Chinese Cyberspies are Targeting US, EU Orgs With New Malware Chinese threat groups continue to deploy new malware strains on the compromised network of dozens of US and EU organizations after exploiting vulnerable Pulse Secure VPN appliances. As FireEye threat analysts revealed last month, state-sponsored threat actors were exploiting a Read more…

SonicWall Urges Customers to ‘Immediately’ Patch NSM On-Prem Bug SonicWall urges customers to ‘immediately’ patch a post-authentication vulnerability impacting on-premises versions of the Network Security Manager (NSM) multi-tenant firewall management solution. The vulnerability tracked as CVE-2021-20026 affects NSM 2.2.0-R10-H1 and earlier and it was patched by SonicWall in the NSM 2.2.1-R6 and Read more…

Ransomware Gangs’ Slow Decryptors Prompt Victims to Seek Alternatives Recently, two highly publicized ransomware victims received a decryptor that was too slow to make it effective in quickly restoring the victim’s network. The first was Colonial Pipeline, which paid a $4.4 million ransom for a decryptor after being attacked by the Read more…

Microsoft: SolarWinds Hackers Target Govt Agencies From 24 Countries The Microsoft Threat Intelligence Center (MSTIC) has discovered that the SolarWinds hackers are behind an ongoing spear-phishing campaign targeting government agencies worldwide. “This week we observed cyberattacks by the threat actor Nobelium targeting government agencies, think tanks, consultants, and non-governmental organizations,” MSTIC Read more…

FBI to Share Compromised Passwords With Have I Been Pwned The FBI will soon begin to share compromised passwords with Have I Been Pwned’s ‘Password Pwned’ service that were discovered during law enforcement investigations. The Have I Been Pwned data breach notification site includes a service called Pwned Passwords that allows users Read more…

FBI: APT Hackers Breached US Local Govt By Exploiting Fortinet Bugs The Federal Bureau of Investigation (FBI) says state-sponsored attackers breached the webserver of a U.S. municipal government after hacking a Fortinet appliance. “As of at least May 2021, an APT actor group almost certainly exploited a Fortigate appliance to Read more…

New BazaFlix Attack Pushes BazarLoader Malware Via Fake Movie Site Security researchers found a new BazarCall email phishing campaign that manages to bypass automated threat detection systems to deliver the BazarLoader malware used by the TrickBot gang. A new wave of BazarCall emails were spotted at the beginning of the Read more…