cybercrime - Security Ticks

20% of malware attacks bypass antivirus protection

attacks, cybercrime, cybersecurity, Malware, News, report, SpyCloud, survey / SecurityTicks

20% of malware attacks bypass antivirus protection 13/07/2023 at 07:02 By Help Net Security Security leaders are concerned about attacks that leverage malware-exfiltrated authentication data, with 53% expressing extreme concern and less than 1% admitting they weren’t concerned at all, according to SpyCloud. However, many still lack the necessary tools to investigate the security and […]

React to this headline:

20% of malware attacks bypass antivirus protection Read More »

Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals

certificates, China, cybercrime, driver, Endpoint Security / SecurityTicks

Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals 12/07/2023 at 14:54 By Eduard Kovacs Microsoft has revoked signed drivers used for post-exploitation activity, in many cases by Chinese cybercriminals. The post Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Microsoft Revokes Many Signed Drivers Used by Chinese Cybercriminals Read More »

Staying ahead of the “professionals”: The service-oriented ransomware crime industry

cybercrime, cybersecurity, Expert analysis, Expert corner, Hot stuff, opinion, Ransomware, threats, WithSecure / SecurityTicks

Staying ahead of the “professionals”: The service-oriented ransomware crime industry 12/07/2023 at 07:35 By Help Net Security Ransomware has been a hugely profitable industry for criminal gangs for the last few years. The total amount of ransom paid since 2020 is estimated to be at least $2 billion, and this has both motivated and enabled

React to this headline:

Staying ahead of the “professionals”: The service-oriented ransomware crime industry Read More »

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884)

0-day, BlackBerry, Cisco, cyber espionage, cybercrime, Don't miss, drivers, Google, Hot stuff, Microsoft, MS Office, News, Ransomware, rootkits, security update, Tenable, Trend Micro, Volexity, vulnerability, Windows / SecurityTicks

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884) 11/07/2023 at 22:31 By Zeljka Zorz For July 2023 Patch Tuesday, Microsoft has delivered 130 patches; among them are four for vulnerabilites actively exploited by attackers, but no patch for CVE-2023-36884, an Office and Windows HTML RCE vulnerability exploited in targeted attacks

React to this headline:

Microsoft patches four exploited zero-days, but lags with fixes for a fifth (CVE-2023-36884) Read More »

Microsoft Warns of Office Zero-Day Attacks, No Patch Available

cybercrime, Cyberwarfare, Vulnerabilities / SecurityTicks

Microsoft Warns of Office Zero-Day Attacks, No Patch Available 11/07/2023 at 21:47 By Ryan Naraine Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite. The post Microsoft Warns of Office Zero-Day Attacks, No Patch Available appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Microsoft Warns of Office Zero-Day Attacks, No Patch Available Read More »

Industry responses and strategies for navigating the tides of DDoS attacks

Akamai, Arelion, attacks, cybercrime, cybersecurity, DDoS, Mazebolt, Neustar Security Services, Nexusguard, Video / SecurityTicks

Industry responses and strategies for navigating the tides of DDoS attacks 11/07/2023 at 06:33 By Help Net Security It is important not to underestimate the potentially devastating impact of DDoS attacks. Organizations of all sizes should take proactive measures to mitigate and safeguard against DDoS attacks, ensuring the continuity and resilience of their operations. Throughout

React to this headline:

Industry responses and strategies for navigating the tides of DDoS attacks Read More »

Critical Infrastructure Services Firm Ventia Takes Systems Offline Due to Cyberattack

cybercrime, Ransomware / SecurityTicks

Critical Infrastructure Services Firm Ventia Takes Systems Offline Due to Cyberattack 10/07/2023 at 20:01 By Ionut Arghire Critical infrastructure services provider Ventia has taken some systems offline following a cyberattack. The post Critical Infrastructure Services Firm Ventia Takes Systems Offline Due to Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Critical Infrastructure Services Firm Ventia Takes Systems Offline Due to Cyberattack Read More »

New disturbing ransomware trend threatens organizations

cybercrime, cybercriminals, cybersecurity, News, Ransomware, Zscaler / SecurityTicks

New disturbing ransomware trend threatens organizations 10/07/2023 at 06:02 By Help Net Security Ransomware attacks increased by over 37% in 2023 compared to the previous year, with the average enterprise ransom payment exceeding $100,000, with a $5.3 million average demand, according to Zscaler. Since April 2022, ThreatLabz has identified thefts of several terabytes of data

React to this headline:

New disturbing ransomware trend threatens organizations Read More »

After Zero-Day Attacks, MOVEit Turns to Security Service Packs

CVE-2023-36932, CVE-2023-36933, CVE-2023-36934, cybercrime, Progress Software, Ransomware, Vulnerabilities, Zero-Day / SecurityTicks

After Zero-Day Attacks, MOVEit Turns to Security Service Packs 07/07/2023 at 20:31 By Ryan Naraine Facing ransomware zero-days, Progress Software will release regular service packs to help customers mitigate critical security flaws. The post After Zero-Day Attacks, MOVEit Turns to Security Service Packs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

After Zero-Day Attacks, MOVEit Turns to Security Service Packs Read More »

Former Contractor Employee Charged for Hacking California Water Treatment Facility

charged, cybercrime, Water / SecurityTicks

Former Contractor Employee Charged for Hacking California Water Treatment Facility 07/07/2023 at 18:31 By Eduard Kovacs Former contractor employee charged with hacking for accessing the systems of a water treatment facility in California to delete critical software. The post Former Contractor Employee Charged for Hacking California Water Treatment Facility appeared first on SecurityWeek. This article

React to this headline:

Former Contractor Employee Charged for Hacking California Water Treatment Facility Read More »

Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data

cybercrime, Featured, MOVEit, Ransomware, Shell / SecurityTicks

Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data 06/07/2023 at 16:05 By Eduard Kovacs Shell confirms that employee personal information has been stolen after the Cl0p ransomware group leaked data allegedly stolen from the energy giant. The post Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data appeared first on SecurityWeek. This article is

React to this headline:

Shell Confirms MOVEit-Related Breach After Ransomware Group Leaks Data Read More »

Interpol: Key Member of Major Cybercrime Group Arrested in Africa

arrested, cybercrime, Interpol / SecurityTicks

Interpol: Key Member of Major Cybercrime Group Arrested in Africa 06/07/2023 at 14:46 By Ionut Arghire Law enforcement authorities have arrested a suspected senior member of the French-speaking Opera1er cybercrime group. The post Interpol: Key Member of Major Cybercrime Group Arrested in Africa appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Interpol: Key Member of Major Cybercrime Group Arrested in Africa Read More »

How ransomware impacts the healthcare industry

CISO, cybercrime, cybersecurity, Don't miss, healthcare, Hot stuff, Malware, Ransomware, strategy, tips, Video / SecurityTicks

How ransomware impacts the healthcare industry 05/07/2023 at 07:02 By Help Net Security Healthcare continues to be one of the most attractive targets for cyberattackers, and the number of breaches affecting the industry is increasing yearly. In this Help Net Security video, Steve Gwizdala, VP of Healthcare at ForgeRock, discusses how vigilance and new ways

React to this headline:

How ransomware impacts the healthcare industry Read More »

Fileless attacks increase 1,400%

Aqua Security, cybercrime, Don't miss, News, report, threat / SecurityTicks

Fileless attacks increase 1,400% 04/07/2023 at 07:11 By Help Net Security Aggregated honeypot data, over a six-month period, showed that more than 50% of the attacks focused on defense evasion, according to Aqua Security. Threat actors avoid detection These attacks included masquerading techniques, such as files executed from /tmp, and obfuscated files or information, such

React to this headline:

Fileless attacks increase 1,400% Read More »

The rise in cyber extortion attacks and its impact on business security

attack, CISO, cybercrime, cybersecurity, Don't miss, Hot stuff, Orange Cyberdefense, strategy, tips, Video / SecurityTicks

The rise in cyber extortion attacks and its impact on business security 03/07/2023 at 07:08 By Help Net Security In this Help Net Security video, Charl van der Walt, Head of Security Research at Orange Cyberdefense, discusses cyber extortion attacks and their expansion to new regions. A recent report revealed that cyber extortion activity reached

React to this headline:

The rise in cyber extortion attacks and its impact on business security Read More »

Unlocking internet’s secrets via monitoring, data collection, and analysis

CDNetworks, CISO, cybercrime, cybersecurity, data collection, Don't miss, exploit, Features, Hot stuff, monitoring, Netcraft, News, opinion, SSL/TLS, threats / SecurityTicks

Unlocking internet’s secrets via monitoring, data collection, and analysis 30/06/2023 at 05:05 By Mirko Zorz In this Help Net Security interview, Ryan Woodley, CEO of Netcraft, discusses the importance of monitoring, collecting, and analyzing internet data to gain a profound understanding of the internet. This insight plays a vital role in protecting and empowering customers.

React to this headline:

Unlocking internet’s secrets via monitoring, data collection, and analysis Read More »

Over 130 Organizations, Millions of Individuals Believed to Be Impacted by MOVEit Hack

cybercrime, Data Breaches / SecurityTicks

Over 130 Organizations, Millions of Individuals Believed to Be Impacted by MOVEit Hack 29/06/2023 at 12:31 By Eduard Kovacs More victims of the MOVEit hack have come to light, with a total of over 130 organizations and 15 million people believed to be affected. The post Over 130 Organizations, Millions of Individuals Believed to Be

React to this headline:

Over 130 Organizations, Millions of Individuals Believed to Be Impacted by MOVEit Hack Read More »

Global rise in DDoS attacks threatens digital infrastructure

ChatGPT, cybercrime, DDoS, News, Nexusguard / SecurityTicks

Global rise in DDoS attacks threatens digital infrastructure 29/06/2023 at 06:35 By Help Net Security In 2022, the total number of DDoS attacks worldwide increased by 115.1% over the amount observed in 2021, according to Nexusguard. The data also showed that cyber attackers continued to alter their threat vectors by targeting the application platforms, online

React to this headline:

Global rise in DDoS attacks threatens digital infrastructure Read More »

Siemens Energy, Schneider Electric Targeted by Ransomware Group in MOVEit Attack

cybercrime, ICS/OT, Ransomware / SecurityTicks

Siemens Energy, Schneider Electric Targeted by Ransomware Group in MOVEit Attack 28/06/2023 at 12:22 By Eduard Kovacs Energy giants Schneider Electric and Siemens Energy confirm being targeted by the Cl0p ransomware group in the campaign exploiting a MOVEit zero-day. The post Siemens Energy, Schneider Electric Targeted by Ransomware Group in MOVEit Attack appeared first on

React to this headline:

Siemens Energy, Schneider Electric Targeted by Ransomware Group in MOVEit Attack Read More »

3-Year Probe Into Encrypted Phones Led to Seizure of Hundreds of Tons of Drugs, Prosecutors Say

cybercrime / SecurityTicks

3-Year Probe Into Encrypted Phones Led to Seizure of Hundreds of Tons of Drugs, Prosecutors Say 27/06/2023 at 18:02 By Associated Press Investigations triggered by the cracking of encrypted phones three years ago have led to more than 6,500 arrests worldwide and the seizure of hundreds of tons of drugs. The post 3-Year Probe Into

React to this headline:

3-Year Probe Into Encrypted Phones Led to Seizure of Hundreds of Tons of Drugs, Prosecutors Say Read More »