Nation-State - Security Ticks

Predator Spyware Resurfaces With Fresh Infrastructure

intellexa, Nation-State, Predator, spyware / SecurityTicks

Predator Spyware Resurfaces With Fresh Infrastructure 2024-09-09 at 13:31 By Ionut Arghire Recorded Future observes renewed Predator spyware activity on fresh infrastructure after a drop caused by US sanctions. The post Predator Spyware Resurfaces With Fresh Infrastructure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to […]

React to this headline:

Predator Spyware Resurfaces With Fresh Infrastructure Read More »

Russian GRU Unit Tied to Assassinations Now Linked to Global Cyber Sabotage and Espionage

Cyberwarfare, GRU 29155, HermeticWiper, Nation-State, Russia, Ukraine, whispergate / SecurityTicks

Russian GRU Unit Tied to Assassinations Now Linked to Global Cyber Sabotage and Espionage 2024-09-05 at 21:46 By Ryan Naraine A secretive Russian military unit, previously linked to assassinations and destabilization in Europe, is blamed for destructive wiper malware attacks in Ukraine. The post Russian GRU Unit Tied to Assassinations Now Linked to Global Cyber

React to this headline:

Russian GRU Unit Tied to Assassinations Now Linked to Global Cyber Sabotage and Espionage Read More »

Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage

Cyberwarfare, Featured, GRU 29155, HermeticWiper, Nation-State, Russia, Ukraine, whispergate / SecurityTicks

Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage 2024-09-05 at 21:46 By Ryan Naraine A secretive Russian military unit, previously linked to assassinations and destabilization in Europe, is blamed for destructive wiper malware attacks in Ukraine. The post Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and

React to this headline:

Russian GRU Unit Tied to Assassinations Linked to Global Cyber Sabotage and Espionage Read More »

Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa

APT29, Google Chrome, Malware & Threats, Midnight Blizzard, Nation-State, Nobelium, Russia / SecurityTicks

Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa 2024-08-29 at 16:46 By Ryan Naraine Google TAG publishes evidence showing identical or striking similarities between exploits used by Russia’s APT29 and commercial spyware vendors. The post Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa appeared first on SecurityWeek.

React to this headline:

Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa Read More »

Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs

CVE-2024-39717, Cyberwarfare, Nation-State, Versa Director, Volt Typhoon, Zero-Day / SecurityTicks

Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs 2024-08-28 at 19:01 By Ryan Naraine Amidst Volt Typhoon zero-day exploitation, Censys finds hundreds of exposed servers presenting ripe attack surface for attackers. The post Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs appeared first on SecurityWeek.

React to this headline:

Censys Finds Hundreds of Exposed Servers as Volt Typhoon APT Targets ISPs, MSPs Read More »

WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies

exploited, Featured, Nation-State, South Korea, WPS Office, Zero-Day / SecurityTicks

WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies 2024-08-28 at 18:01 By Eduard Kovacs A WPS Office zero-day vulnerability tracked as CVE⁠-⁠2024⁠-⁠7262 was exploited by South Korean hacker group APT-C-60. The post WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

WPS Office Zero-Day Exploited by South Korea-Linked Cyberspies Read More »

Rising Tides: Runa Sandvik on Creating Work that Makes a Difference

cybercrime, Management & Strategy, Nation-State / SecurityTicks

Rising Tides: Runa Sandvik on Creating Work that Makes a Difference 2024-08-28 at 14:31 By Jennifer Leggio Runa Sandvik is an inaugural member of CISA’s Technical Advisory Council and the Aspen Institute’s Global Cybersecurity Group, and a board member of the Signals Network. But she is so much more. The post Rising Tides: Runa Sandvik

React to this headline:

Rising Tides: Runa Sandvik on Creating Work that Makes a Difference Read More »

Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day

Black Lotus Labs, China APT, Cyberwarfare, Featured, KV Botnet, Nation-State, Versa Director, Volt Typhoon / SecurityTicks

Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day 2024-08-26 at 21:17 By Ryan Naraine Malware hunters catch Chinese APT Volt Typhoon exploiting a zero-day in Versa Director servers used by ISPs and MSPs. The post Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day appeared first on SecurityWeek. This article is an

React to this headline:

Chinese APT Volt Typhoon Caught Exploiting Versa Networks SD-WAN Zero-Day Read More »

Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says

Election, Featured, Iran, Nation-State, Trump, WhatsApp / SecurityTicks

Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says 2024-08-25 at 19:46 By Associated Press Meta said it discovered a network of Iranian hackers, who posed as tech support agents for companies including AOL, Microsoft, Yahoo and Google. The post Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations,

React to this headline:

Iranian Hackers Targeted WhatsApp Accounts of Staffers in Biden, Trump Administrations, Meta Says Read More »

China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches

Cisco, Nation-State, Network Security, Vulnerabilities, vulnerability / SecurityTicks

China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches 2024-08-22 at 20:03 By Kevin Townsend Hackers gained access to the switch using valid administrator credentials, and then ‘jailbroke’ from the application level into the OS level. The post China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches

React to this headline:

China-Linked ‘Velvet Ant’ Hackers Exploited Zero-Day to Deploy Malware on Cisco Nexus Switches Read More »

US Intelligence Officials Say Iran is to Blame for Hacks Targeting Trump, Biden-Harris Campaigns

Cyberwarfare, Election, Iran, Nation-State, Trump / SecurityTicks

US Intelligence Officials Say Iran is to Blame for Hacks Targeting Trump, Biden-Harris Campaigns 2024-08-20 at 05:16 By Associated Press The assessment from agencies was the first time the U.S. government assigned blame for hacks that have raised anew the threat of foreign election interference. The post US Intelligence Officials Say Iran is to Blame

React to this headline:

US Intelligence Officials Say Iran is to Blame for Hacks Targeting Trump, Biden-Harris Campaigns Read More »

Google Disrupts Iranian Hacking Activity Targeting US Presidential Election

Election, Google, Iran, Nation-State, takedown / SecurityTicks

Google Disrupts Iranian Hacking Activity Targeting US Presidential Election 2024-08-15 at 16:32 By Ionut Arghire Google says it blocked Iranian APT42 hackers from accessing the personal email accounts of individuals affiliated with the US elections. The post Google Disrupts Iranian Hacking Activity Targeting US Presidential Election appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Google Disrupts Iranian Hacking Activity Targeting US Presidential Election Read More »

Google Confirms an Iranian Group Is Trying to Access Emails Linked to Both US Presidential Campaigns

Election, Harris, Iran, Nation-State, Trump / SecurityTicks

Google Confirms an Iranian Group Is Trying to Access Emails Linked to Both US Presidential Campaigns 2024-08-15 at 13:46 By Associated Press Google said an Iranian hacking group has tried to infiltrate the personal email accounts of roughly a dozen people linked to President Joe Biden and former President Donald Trump since May. The post

React to this headline:

Google Confirms an Iranian Group Is Trying to Access Emails Linked to Both US Presidential Campaigns Read More »

Justice Department Disrupts North Korean ‘Laptop Farm’ Operation

KnowBe4, laptop farm, Matthew Isaac Knoot, Nation-State, North Korea, Tracking & Law Enforcement / SecurityTicks

Justice Department Disrupts North Korean ‘Laptop Farm’ Operation 2024-08-12 at 20:31 By Ryan Naraine Law enforcement authorities in the U.S. have arrested a Tennessee man accused of running a “laptop farm” that helped North Korean IT workers secure remote jobs at American companies. The post Justice Department Disrupts North Korean ‘Laptop Farm’ Operation appeared first

React to this headline:

Justice Department Disrupts North Korean ‘Laptop Farm’ Operation Read More »

Iran Is Accelerating Cyber Activity That Appears Meant to Influence the US Election, Microsoft Says

Election, Iran, Nation-State / SecurityTicks

Iran Is Accelerating Cyber Activity That Appears Meant to Influence the US Election, Microsoft Says 2024-08-09 at 16:31 By Associated Press Iranian actors have spent recent months creating fake news sites and impersonating activists, laying the groundwork to stoke division and potentially sway American voters this fall. The post Iran Is Accelerating Cyber Activity That

React to this headline:

Iran Is Accelerating Cyber Activity That Appears Meant to Influence the US Election, Microsoft Says Read More »

Convicted Cybercriminals Included in Russian Prisoner Swap

cybercrime, Evan Gershkovich, Nation-State, Paul Whelan, Roman Seleznev, Russia, Vladislav Klyushin / SecurityTicks

Convicted Cybercriminals Included in Russian Prisoner Swap 2024-08-01 at 22:46 By SecurityWeek News Two Russians serving time for insider trading, computer hacking and credit card theft were released in a prisoner swap deal with Moscow. The post Convicted Cybercriminals Included in Russian Prisoner Swap appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Convicted Cybercriminals Included in Russian Prisoner Swap Read More »

Alex Stamos Named CISO at SentinelOne

CISO, CISO Strategy, CrowdStrike, Management & Strategy, Microsoft, Nation-State, SentinelOne, Yahoo / SecurityTicks

Alex Stamos Named CISO at SentinelOne 2024-08-01 at 19:16 By Ryan Naraine Longtime security executive Alex Stamos tapped by SentinelOne to manage its security engineering and operations teams. The post Alex Stamos Named CISO at SentinelOne appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this

React to this headline:

Alex Stamos Named CISO at SentinelOne Read More »

Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine

Andariel, APT45, Lazarus, Malware & Threats, Mandiant, Nation-State, North Korea, Ransomware / SecurityTicks

Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine 2024-07-25 at 14:16 By Ryan Naraine A fresh Mandiant report documents North Korea’s APT45 as a distinct hacking team conducting cyberespionage and ransomware operations. The post Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine appeared first on SecurityWeek. This article is

React to this headline:

Mandiant Shines Spotlight on APT45 Behind North Korea’s Digital Military Machine Read More »

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware

Artificial Intelligence, deepfakes, Endpoint Security, KnowBe4, Lazarus, Nation-State, North Korea / SecurityTicks

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware 2024-07-24 at 05:16 By Ryan Naraine KnowBe4 chief executive Stu Sjouwerman: “We sent them their Mac workstation, and the moment it was received, it immediately started to load malware.” The post KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware

React to this headline:

KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware Read More »

Judge Dismisses Major SEC Charges Against SolarWinds and CISO

Application Security, CISO, CISO Strategy, Nation-State, SolarWinds, SUNBURST, Supply Chain Security / SecurityTicks

Judge Dismisses Major SEC Charges Against SolarWinds and CISO 2024-07-20 at 00:31 By Ryan Naraine Judge dismissed SEC lawsuit charging SolarWinds and CISO Timothy Brown with hiding security problems before and after the SUNBURST supply chain compromise. The post Judge Dismisses Major SEC Charges Against SolarWinds and CISO appeared first on SecurityWeek. This article is

React to this headline:

Judge Dismisses Major SEC Charges Against SolarWinds and CISO Read More »