Cybersecurity (General)

Microsoft Gets Windows 11 Ready For Release With New Build Microsoft has moved Windows 11 to the Windows Insider ‘Release’ channel in anticipation of its upcoming launch on October 5th. Until today, the Windows Insider Release channel has been offering users Windows 10 21H2 (v19044), which is expected to be Read more…

Hacking Group Used ProxyLogon Exploits to Breach Hotels Worldwide A newly discovered cyberespionage group has been targeting hotels worldwide around the world since at least 2019, as well as higher-profile targets such as governments, international organizations, law firms, and engineering companies. Slovakian internet security firm ESET spotted the hacking group Read more…

Apple Patches New Zero-day Bug Used to Hack iPhones and Macs Apple has released security updates to fix a zero-day vulnerability exploited in the wild by attackers to hack into iPhones and Macs running older iOS and macOS versions. The zero-day patched today (tracked as CVE-2021-30869) [1, 2] was found in the Read more…

Malware Devs Trick Windows Validation With Malformed Certs Google researchers spotted malware developers creating malformed code signatures seen as valid in Windows to bypass security software. This tactic is actively used to push OpenSUpdater, a family of unwanted software also known as riskware, which injects ads into victims’ browsers and installs other unwanted Read more…

REvil Ransomware Devs Added A Backdoor To Cheat Affiliates Cybercriminals are slowly realizing that the REvil ransomware operators may have been hijacking ransom negotiations, to cut affiliates out of payments. By using a cryptographic scheme that allowed them to decrypt any systems locked by REvil ransomware, the operators left their Read more…

Hackers Are Scanning For VMware CVE-2021-22005 Targets, Patch Now! Threat actors have already started targeting Internet-exposed VMware vCenter servers unpatched against a critical arbitrary file upload vulnerability patched yesterday that could lead to remote code execution. The security flaw tracked as CVE-2021-22005 impacts all vCenter Server 6.7 and 7.0 deployments with default Read more…

FBI, CISA, and NSA Warn Of Escalating Conti Ransomware Attacks CISA, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) warned today of an increased number of Conti ransomware attacks targeting US organizations. The three US federal agencies urge enterprise IT admins to review their organizations’ network Read more…

Apple Will Disable Insecure TLS In Future iOS, MacOS Releases Apple has deprecated the insecure Transport Layer Security (TLS) 1.0 and 1.1 protocols in recently launched iOS and macOS versions and plans to remove support in future releases altogether. TLS is a secure communication protocol designed to protect users from Read more…

Second Farming Cooperative Shut Down By Ransomware This Week Minnesota farming supply cooperative Crystal Valley has suffered a ransomware attack, making it the second farming cooperative attacked this weekend. Crystal Valley is a farm supply and grain marketing cooperative serving farmers in Minnesota and northern Iowa. Yesterday, Crystal Valley disclosed that Read more…

Phishing-as-a-service Operation Uses Double Theft To Boost Profits Microsoft says BulletProofLink, a large-scale phishing-as-a-service (PhaaS) operation it spotted while investigating recent phishing attacks, is the driving force behind many phishing campaigns that have targeted many corporate organizations lately. The threat actor behind BulletProofLink (also known as BulletProftLink and Anthrax) provides cybercriminals with Read more…