Malware & Threats - Security Ticks

APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure

exploit, Featured, ICS, ICS/OT, Malware & Threats, Rockwell Automation, Vulnerabilities / SecurityTicks

APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure 13/07/2023 at 13:32 By Eduard Kovacs Two Rockwell Automation product vulnerabilities have been used for a new exploit by an APT group that could use it to target critical infrastructure. The post APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure appeared first on […]

React to this headline:

APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure Read More »

In Other News: Healthcare Product Flaws, Free Email Security Testing, New Attack Techniques

email security, In Other News, Malware & Threats, Vulnerabilities / SecurityTicks

In Other News: Healthcare Product Flaws, Free Email Security Testing, New Attack Techniques 07/07/2023 at 18:31 By SecurityWeek News Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 3, 2023. The post In Other News: Healthcare Product Flaws, Free Email Security

React to this headline:

In Other News: Healthcare Product Flaws, Free Email Security Testing, New Attack Techniques Read More »

Iranian Cyberspies Target US-Based Think Tank With New macOS Malware

Iran, Mac malware, Malware & Threats / SecurityTicks

Iranian Cyberspies Target US-Based Think Tank With New macOS Malware 07/07/2023 at 18:31 By Ionut Arghire In May 2023, Iran-linked cyberespionage group Charming Kitten targeted a US-based think tank with new macOS malware. The post Iranian Cyberspies Target US-Based Think Tank With New macOS Malware appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Iranian Cyberspies Target US-Based Think Tank With New macOS Malware Read More »

Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers

Malware & Threats, Mobile & Wireless / SecurityTicks

Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers 07/07/2023 at 15:03 By Ionut Arghire Two applications hosted on Google Play, with over 1.5 million combined downloads, were caught sending user data to servers in China. The post Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers

React to this headline:

Two Apps Hosted on Google Play Caught Sending User Data to Chinese Servers Read More »

Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert

Application Security, Bishop Fox, CVE-2022-31199, FBI, Malware & Threats, netwrix auditor, Ransomware / SecurityTicks

Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert 06/07/2023 at 23:04 By Ryan Naraine Hackers linked to the Truebot malware are exploiting a year-old Netwrix Auditor flaw to break into organizations in the U.S. and Canada. The post Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert appeared first on SecurityWeek. This article is

React to this headline:

Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert Read More »

Submarine Cables at Risk of Nation-State Sabotage, Spying: Report

Malware & Threats, Risk Management, submarine, Water / SecurityTicks

Submarine Cables at Risk of Nation-State Sabotage, Spying: Report 28/06/2023 at 15:04 By Ionut Arghire Recorded Future underlines threats to submarine telecommunication cables, such as the risk of intentional sabotage and spying by nation-state threat actors. The post Submarine Cables at Risk of Nation-State Sabotage, Spying: Report appeared first on SecurityWeek. This article is an

React to this headline:

Submarine Cables at Risk of Nation-State Sabotage, Spying: Report Read More »

Anatsa Banking Trojan Delivered via Google Play Targets Android Users in US, Europe

Anatsa, Android, Android trojan, Malware & Threats, Mobile & Wireless / SecurityTicks

Anatsa Banking Trojan Delivered via Google Play Targets Android Users in US, Europe 28/06/2023 at 12:22 By Ionut Arghire Malicious applications with over 30,000 installs in Google Play have infected Android devices with the Anatsa banking trojan. The post Anatsa Banking Trojan Delivered via Google Play Targets Android Users in US, Europe appeared first on

React to this headline:

Anatsa Banking Trojan Delivered via Google Play Targets Android Users in US, Europe Read More »

CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks

Malware & Threats / SecurityTicks

CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks 26/06/2023 at 14:47 By Eduard Kovacs CISA has warned users of Zyxel NAS products that the recently patched critical vulnerability CVE-2023-27992 has been exploited in attacks. The post CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

CISA Says Critical Zyxel NAS Vulnerability Exploited in Attacks Read More »

NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections

bootkit, firmware, Malware & Threats, NSA, UEFI, Vulnerabilities / SecurityTicks

NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections 23/06/2023 at 20:58 By Ionut Arghire The National Security Agency (NSA) has released mitigation guidance to help organizations stave off BlackLotus UEFI bootkit infections. The post NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

NSA Issues Guidance on Mitigating BlackLotus Bootkit Infections Read More »

China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor

APT15, China, graphican, Malware & Threats, Nation-State / SecurityTicks

China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor 22/06/2023 at 18:46 By Ionut Arghire A Chinese hacking group flagged as APT15 is targeting foreign affairs ministries in the Americas with a new backdoor named Graphican. The post China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

China-Linked APT15 Targets Foreign Ministries With ‘Graphican’ Backdoor Read More »

VMware Confirms Live Exploits Hitting Just-Patched Security Flaw

Aria Operations for Networks, Malware & Threats, Network Security, virtualization, VMWare, Vulnerabilities / SecurityTicks

VMware Confirms Live Exploits Hitting Just-Patched Security Flaw 21/06/2023 at 03:16 By Ryan Naraine VMware updates a critical-level bulletin: “VMware has confirmed that exploitation of CVE-2023-20887 has occurred in the wild.” The post VMware Confirms Live Exploits Hitting Just-Patched Security Flaw appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

VMware Confirms Live Exploits Hitting Just-Patched Security Flaw Read More »

New ‘RDStealer’ Malware Targets RDP Connections

Bitdefender, Malware & Threats, Nation-State, RDP, RDStealer / SecurityTicks

New ‘RDStealer’ Malware Targets RDP Connections 20/06/2023 at 18:20 By Ionut Arghire Bitdefender finds new malware capable of monitoring incoming RDP connections and infect the connecting clients that have client drive mapping enabled. The post New ‘RDStealer’ Malware Targets RDP Connections appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

New ‘RDStealer’ Malware Targets RDP Connections Read More »

Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military

Malware & Threats, Russia, Ukraine, USB / SecurityTicks

Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military 16/06/2023 at 16:28 By Ionut Arghire Russia-linked hacking group Gamaredon is infecting USB drives for lateral movement within compromised Ukrainian networks. The post Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Russian Hackers Using USB-Spreading Malware in Attacks on Ukrainian Government, Military Read More »

In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act

Artificial Intelligence, cybercrime, Malware & Threats / SecurityTicks

In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act 16/06/2023 at 16:28 By SecurityWeek News Cybersecurity news that you may have missed this week: Bug bounties for Linux kernel exploits, Cybersecurity Awareness Act, FBI data on BEC losses. The post In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity

React to this headline:

In Other News: Linux Kernel Exploits, Update on BEC Losses, Cybersecurity Awareness Act Read More »

CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored

CosmicEnergy, ICS, ICS malware, ICS/OT, Malware & Threats, OT / SecurityTicks

CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored 13/06/2023 at 19:21 By Eduard Kovacs The Russia-linked ICS malware named CosmicEnergy does not pose a direct threat to OT systems as it contains errors and lacks maturity. The post CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored appeared

React to this headline:

CosmicEnergy ICS Malware Poses No Immediate Threat, but Should Not Be Ignored Read More »

Barracuda Urges Customers to Replace Hacked Email Security Appliances

Barracuda, Malware & Threats, Network Security / SecurityTicks

Barracuda Urges Customers to Replace Hacked Email Security Appliances 08/06/2023 at 12:02 By Eduard Kovacs Barracuda Networks is telling customers to immediately replace hacked ESG email security appliances regardless of the patches they installed. The post Barracuda Urges Customers to Replace Hacked Email Security Appliances appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Barracuda Urges Customers to Replace Hacked Email Security Appliances Read More »

Dozens of Malicious Extensions Found in Chrome Web Store

Chrome, Malware & Threats / SecurityTicks

Dozens of Malicious Extensions Found in Chrome Web Store 05/06/2023 at 21:47 By Ionut Arghire Security researchers have identified over 30 malicious extensions with millions of installs in the Chrome web store. The post Dozens of Malicious Extensions Found in Chrome Web Store appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Dozens of Malicious Extensions Found in Chrome Web Store Read More »

In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack

Malware & Threats, news roundup, Tracking & Law Enforcement, Vulnerabilities / SecurityTicks

In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack 03/06/2023 at 14:33 By Eduard Kovacs Cybersecurity news that you may have missed this week: the spyware used by various governments, new vulnerabilities, industrial security products, and Linux router attacks. The post In Other News: Government Use of Spyware, New Industrial

React to this headline:

In Other News: Government Use of Spyware, New Industrial Security Tools, Japan Router Hack Read More »

Russia Blames US Intelligence for iOS Zero-Click Attacks

apple, Cyberwarfare, exploit, Featured, iOS, Malware & Threats, Russia / SecurityTicks

Russia Blames US Intelligence for iOS Zero-Click Attacks 01/06/2023 at 17:48 By Eduard Kovacs Kaspersky said its corporate network has been targeted with a zero-click iOS exploit, just as Russia’s FSB said iPhones have been targeted by US intelligence. The post Russia Blames US Intelligence for iOS Zero-Click Attacks appeared first on SecurityWeek. This article

React to this headline:

Russia Blames US Intelligence for iOS Zero-Click Attacks Read More »

Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards

backdoor, Endpoint Security, Featured, Gigabyte, Malware & Threats / SecurityTicks

Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards 31/05/2023 at 18:34 By Eduard Kovacs A backdoor feature found in hundreds of Gigabyte motherboard models can pose a significant supply chain risk to organizations. The post Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards appeared first on SecurityWeek. This article is an

React to this headline:

Organizations Warned of Backdoor Feature in Hundreds of Gigabyte Motherboards Read More »