2024

Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability 2024-07-30 at 14:31 By Connor Jones Get those patches applied – all the big dogs are abusing it Do you have your VMware ESXi hypervisor joined to Active Directory? Well, the latest news from Microsoft serves as a reminder that you might not want

Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware 2024-07-30 at 14:31 By Cybersecurity researchers have detailed widespread phishing campaigns targeting small and medium-sized businesses (SMBs) in Poland during May 2024 that led to the deployment of several malware families like Agent Tesla, Formbook, and Remcos RAT. Some of the other regions targeted by

Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground 2024-07-30 at 14:31 By Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill’s threat experts. Each story shines a light on underground activities, the threat actors involved, and why you should care, along with what you can do

Europe launches ‘AI Factories’ initiative in hopes of competing globally 2024-07-30 at 13:46 By Dan Robinson Yes, you’ve heard the term ‘AI Factories’ before but Europe has its own spin Europe’s supercomputing body has officially added a new pillar to its strategy – to develop and operate AI Factories to drive “a more competitive and

Latest update for ‘extremely fast’ compression algorithm LZ4 sprints past old versions 2024-07-30 at 12:46 By Liam Proven New release does something you might have thought it already did The new version of the high-speed compression algorithm LZ4 gets a big speed boost – nearly an order of magnitude.… This article is an excerpt from

Revamped UK cybersecurity bill couldn’t come soon enough, but details are patchy 2024-07-30 at 11:46 By Connor Jones Long overdue updates including expanded mandatory security incident reporting seem like a step forward, however they end up looking Analysis  The introduction of fresh UK cybersecurity legislation, though delayed, is timely.… This article is an excerpt from

New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries 2024-07-30 at 11:31 By The nation-state threat actor known as SideWinder has been attributed to a new cyber espionage campaign targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea. The BlackBerry Research and Intelligence Team, which discovered the activity, said targets of

Automation needed to fight army of AI content harvesters stalking the web 2024-07-30 at 10:31 By Thomas Claburn Just when you think you’ve ban-hammered one, it pops up with another name Analysis  This month Anthropic’s ClaudeBot – a web content crawler that scrapes data from pages for training AI models – visited tech advice site

OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script 2024-07-30 at 10:31 By Cybersecurity researchers are warning about a new phishing campaign that targets Microsoft OneDrive users with the aim of executing a malicious PowerShell script. “This campaign heavily relies on social engineering tactics to deceive users into executing a PowerShell script, thereby compromising

South Korea creates $445 bailout fund after payment glitch trips up e-commerce giant 2024-07-30 at 10:16 By Laura Dobberstein Founder forbidden to leave the country, promises to make things right for out-of-pocket vendors The South Korean government on Monday created a ₩560 billion ($445 million) rescue package to bail out merchants who used two major

Proofpoint phishing palaver plagues millions with ‘perfectly spoofed’ emails from IBM, Nike, Disney, others 2024-07-30 at 09:31 By Jessica Lyons They DKIM here, they DKIM there A huge phishing campaign exploited a security blind-spot in Proofpoint’s email filtering systems to send an average of three million “perfectly spoofed” messages a day purporting to be from

VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access 2024-07-30 at 09:16 By A recently patched security flaw impacting VMware ESXi hypervisors has been actively exploited by “several” ransomware groups to gain elevated permissions and deploy file-encrypting malware. The attacks involve the exploitation of CVE-2024-37085 (CVSS score: 6.8), an Active Directory integration authentication bypass

Desktop hypervisors are not dead: Oracle preps major VirtualBox update 2024-07-30 at 09:01 By Simon Sharwood Solaris support persists and support for Armed Macs improves Oracle last week debuted a beta for a major update to its VirtualBox desktop hypervisor.… This article is an excerpt from The Register View Original Source