February 2022

MuddyWater Hacking Group Targets Turkey in New Campaign The Iranian-backed MuddyWater hacking group is conducting a new malicious campaign targeting private Turkish organizations and governmental institutions. This cyber-espionage group (aka Mercury, SeedWorm, and TEMP.Zagros) was linked this month to Iran’s Ministry of Intelligence and Security (MOIS) by the US Cyber Command (USCYBERCOM). The hacking Read more…

FBI Warns of 2022 Beijing Olympics Cyberattack, Privacy Risks The Federal Bureau of Investigation (FBI) warned today that threat actors could potentially target the February 2022 Beijing Winter Olympics and March 2022 Paralympics. However, evidence of such attacks being planned is yet to be uncovered. “The FBI to date is Read more…

Samba Bug can Let Remote Attackers Execute Code as Root Samba has addressed a critical severity vulnerability that can let attackers gain remote code execution with root privileges on servers running vulnerable software. Samba is an SMB networking protocol re-implementation that provides file sharing and printing services across many platforms, Read more…

600K WordPress Sites Impacted by Critical Plugin RCE Vulnerability Essential Addons for Elementor, a popular WordPress plugin used in over a million sites, has been found to have a critical remote code execution (RCE) vulnerability in version 5.0.4 and older. The flaw allows an unauthenticated user to perform a local Read more…

QNAP: DeadBolt Ransomware Exploits a Bug Patched in December Taiwan-based network-attached storage (NAS) maker QNAP urges customers to enable firmware auto-updating on their devices to defend against active attacks. According to the company, the attackers target a vulnerability patched in December, allowing them to run arbitrary code on vulnerable systems. Read more…

CISA Adds 8 Vulnerabilities to List of Actively Exploited Bugs The US Cybersecurity & Infrastructure Security Agency (CISA) has added eight more flaws to its catalog of exploited vulnerabilities that are known to be used in attacks, and they’re a mix of old and new. The goal of publishing these Read more…

Microsoft Office 365 to Add Better Protection for Priority Accounts Microsoft is updating Microsoft Defender for Office 365 with differentiated protection for enterprise accounts tagged as critical for an organization (i.e., accounts of high-profile employees including executive-level managers, the ones most often targeted by attackers). “We are introducing differentiated protection for Priority Read more…

Russian ‘Gamaredon’ Hackers Use 8 New Malware Payloads in Attacks The Russia-linked hackers known as ‘Gamaredon’ (aka Armageddon or Shuckworm) were spotted deploying eight custom binaries in cyber-espionage operations against Ukrainian entities. This hacking group is believed to be operated directly by the Russian FSB (Federal Security Service) and has Read more…

277,000 Routers Exposed to Eternal Silence Attacks via UPnP A malicious campaign known as ‘Eternal Silence’ is abusing Universal Plug and Play (UPnP) turns your router into a proxy server used to launch malicious attacks while hiding the location of the threat actors. UPnP is a connectivity protocol optionally available Read more…