2d ago · 5 min read · The Interlock ransomware group just crossed a line that cybersecurity experts have been dreading. They're using AI to generate custom malware variants, starting with something called Slopoly malware that's showing up in active attacks. This isn't som...
Join discussion5d ago · 6 min read · TL;DR Ransomware gangs have shifted from "encrypt everything" to "compromise the supplier, distribute malware to 500+ customers at once." One compromised software update = thousands of organizations breached simultaneously. TIAMAT's analysis of 6 sup...
Join discussion5d ago · 6 min read · TL;DR Chinese-linked APT groups are actively exploiting 2-year-old VMware ESXi kernel escape vulnerabilities (CVE-2024-20835, CVE-2024-20837) to move from compromised VPN appliances directly into hypervisor control. Once on the hypervisor, they contr...
Join discussion5d ago · 6 min read · TL;DR Ransomware gangs have shifted from healthcare and finance to energy infrastructure. SCADA systems (Supervisory Control and Data Acquisition) — the decades-old control systems running power grids — have 47-second average detection time and zero ...
Join discussion6d ago · 5 min read · 📋 Top Headlines at a Glance SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 87 Recent Cisco Catalyst SD-WAN Vulnerability Now Widely Exploited Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecast OpenAI Codex Secur...
Join discussion
Mar 5 · 5 min read · Originally published on satyamrastogi.com Analysis of Phobos ransomware operation tactics revealing how attackers combine RaaS models with wire fraud conspiracies to maximize financial impact across hundreds of victims worldwide. Executive Summary ...
Join discussion
Mar 4 · 5 min read · Fake IT Support Emails Deploy Havoc C2 Framework as Gateway to Ransomware A new campaign tracked by Huntress researchers reveals how threat actors are impersonating corporate IT help desks to deliver Havoc, an open-source command-and-control (C2) fra...
Join discussion
