Nation-State - Security Ticks

MITRE Hack: China-Linked Group Breached Systems in December 2023

China, cyberespionage, espionage, Featured, Ivanti, MITRE, Nation-State, Zero-Day / SecurityTicks

MITRE Hack: China-Linked Group Breached Systems in December 2023 2024-05-07 at 11:16 By Eduard Kovacs MITRE has shared more details on the recent hack, including the new malware involved in the attack and a timeline of the attacker’s activities. The post MITRE Hack: China-Linked Group Breached Systems in December 2023 appeared first on SecurityWeek. This […]

React to this headline:

MITRE Hack: China-Linked Group Breached Systems in December 2023 Read More »

Iranian Cyberspies Hit Targets With New Backdoors

cyberespionage, espionage, Iran, Nation-State / SecurityTicks

Iranian Cyberspies Hit Targets With New Backdoors 2024-05-06 at 16:16 By Ionut Arghire Iranian state-sponsored group APT42 is targeting NGOs, government, and intergovernmental organizations with two new backdoors. The post Iranian Cyberspies Hit Targets With New Backdoors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Iranian Cyberspies Hit Targets With New Backdoors Read More »

US Says North Korean Hackers Exploiting Weak DMARC Settings

APT, DMARC, email security, Featured, Kimsuky, Malware & Threats, Nation-State, North Korea / SecurityTicks

US Says North Korean Hackers Exploiting Weak DMARC Settings 2024-05-03 at 19:16 By Ionut Arghire The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks. The post US Says North Korean Hackers Exploiting Weak DMARC Settings appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

US Says North Korean Hackers Exploiting Weak DMARC Settings Read More »

ArcaneDoor Espionage Campaign Targeting Cisco Firewalls Linked to China

Nation-State / SecurityTicks

ArcaneDoor Espionage Campaign Targeting Cisco Firewalls Linked to China 2024-05-03 at 17:09 By Eduard Kovacs An analysis of IoCs suggests that a Chinese threat group may be behind the recent ArcaneDoor espionage campaign targeting Cisco firewalls. The post ArcaneDoor Espionage Campaign Targeting Cisco Firewalls Linked to China appeared first on SecurityWeek. This article is an

React to this headline:

ArcaneDoor Espionage Campaign Targeting Cisco Firewalls Linked to China Read More »

Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data

Cuttlefish, HiatusRAT, Malware & Threats, Nation-State, Network Security, router / SecurityTicks

Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data 2024-05-01 at 18:33 By Ryan Naraine Cuttlefish malware platform roaming around enterprise SOHO routers capable of covertly harvesting public cloud authentication data from internet traffic. The post Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Cuttlefish Malware Targets Routers, Harvests Cloud Authentication Data Read More »

Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms

ArcaneDoor, China APT, Cisco ASA, Cisco Talos, Nation-State, Network Security, Vulnerabilities / SecurityTicks

Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms 2024-04-24 at 21:16 By Ryan Naraine Cisco warns that nation state-backed hackers are exploiting at least two zero-day vulnerabilities in its ASA firewall platforms to plant malware on telecommunications and energy sector networks. The post Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms

React to this headline:

Cisco Raises Alarm for ‘ArcaneDoor’ Zero-Days Hitting ASA Firewall Platforms Read More »

$10 Million Bounty on Iranian Hackers for Cyber Attacks on US Gov, Defense Contractors

Cyberwarfare, Iran, Justice Department, Nation-State, Sanctions / SecurityTicks

$10 Million Bounty on Iranian Hackers for Cyber Attacks on US Gov, Defense Contractors 2024-04-23 at 23:04 By Ryan Naraine Four Iranians are accused of hacking into critical systems at the Departments of Treasury and State and dozens of private US companies. The post $10 Million Bounty on Iranian Hackers for Cyber Attacks on US

React to this headline:

$10 Million Bounty on Iranian Hackers for Cyber Attacks on US Gov, Defense Contractors Read More »

Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations

APT28, espionage, Malware, Malware & Threats, Microsoft, Nation-State, Russia / SecurityTicks

Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations 2024-04-23 at 17:16 By Ionut Arghire Russia-linked APT28 deploys the GooseEgg post-exploitation tool against numerous US and European organizations. The post Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Russian Cyberspies Deliver ‘GooseEgg’ Malware to Government Organizations Read More »

MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days

Featured, MITRE, Nation-State / SecurityTicks

MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days 2024-04-22 at 13:16 By Eduard Kovacs MITRE R&D network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability. The post MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

MITRE Hacked by State-Sponsored Group via Ivanti Zero-Days Read More »

Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge

exploited, Featured, Malware & Threats, Nation-State, Palo Alto Networks, Zero-Day / SecurityTicks

Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge 2024-04-15 at 14:00 By Eduard Kovacs Palo Alto Networks has started releasing hotfixes for the firewall zero-day CVE-2024-3400, which some have linked to North Korea’s Lazarus. The post Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge appeared

React to this headline:

Palo Alto Networks Releases Fixes for Firewall Zero-Day as First Attribution Attempts Emerge Read More »

US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft

CISA, Data Breaches, Featured, Incident Response, Microsoft, Midnight Blizzard, Nation-State, Nobelium, Russia / SecurityTicks

US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft 2024-04-11 at 23:46 By Ryan Naraine The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts “presents a grave and unacceptable risk to federal agencies.” The post US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft

React to this headline:

US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft Read More »

Ivanti CEO Vows Cybersecurity Makeover After Zero-Day Blitz

CVE-2023-46805, CVE-2024-21887, Government, Ivanti, Nation-State, Pulse Secure, Vulnerabilities, Zero-Day / SecurityTicks

Ivanti CEO Vows Cybersecurity Makeover After Zero-Day Blitz 2024-04-04 at 22:31 By Ryan Naraine Ivanti releases a carefully scripted YouTube video and an open letter from chief executive Jeff Abbott vowing to fix the entire security organization. The post Ivanti CEO Vows Cybersecurity Makeover After Zero-Day Blitz appeared first on SecurityWeek. This article is an

React to this headline:

Ivanti CEO Vows Cybersecurity Makeover After Zero-Day Blitz Read More »

Microsoft’s Security Chickens Have Come Home to Roost

China APT, cloud security, CSRB, Government, M365, Microsoft, Nation-State / SecurityTicks

Microsoft’s Security Chickens Have Come Home to Roost 2024-04-04 at 13:16 By Ryan Naraine News analysis: SecurityWeek editor-at-large Ryan Naraine reads the CSRB report on China’s audacious Microsoft’s Exchange Online hack and isn’t at all surprised by the findings. The post Microsoft’s Security Chickens Have Come Home to Roost appeared first on SecurityWeek. This article

React to this headline:

Microsoft’s Security Chickens Have Come Home to Roost Read More »

Cyberespionage Campaign Targets Government, Energy Entities in India

APT, Cyberwarfare, India, Malware & Threats, Nation-State, phishing, spear-phishing / SecurityTicks

Cyberespionage Campaign Targets Government, Energy Entities in India 2024-03-28 at 17:17 By Ionut Arghire Threat intelligence firm EclecticIQ documents the delivery of malware phishing lures to government and private energy organizations in India. The post Cyberespionage Campaign Targets Government, Energy Entities in India appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Cyberespionage Campaign Targets Government, Energy Entities in India Read More »

Chinese Cyberspies Targeting ASEAN Entities

China, espionage, Nation-State / SecurityTicks

Chinese Cyberspies Targeting ASEAN Entities 2024-03-28 at 14:16 By Ionut Arghire Two Chinese cyberespionage groups have been targeting entities and member countries affiliated with ASEAN. The post Chinese Cyberspies Targeting ASEAN Entities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this headline:

React to this headline:

Chinese Cyberspies Targeting ASEAN Entities Read More »

Google Report: Despite Surge in Zero-Day Attacks, Exploit Mitigations Are Working

Google TAG, Lockdown Mode, Malware & Threats, Mandiant, Nation-State, Vulnerabilities, Zero-Day / SecurityTicks

Google Report: Despite Surge in Zero-Day Attacks, Exploit Mitigations Are Working 2024-03-27 at 17:01 By Ryan Naraine Despite a surge in zero-day attacks, data shows that security investments into OS and software exploit mitigations are forcing attackers to find new attack surfaces and bug patterns. The post Google Report: Despite Surge in Zero-Day Attacks, Exploit

React to this headline:

Google Report: Despite Surge in Zero-Day Attacks, Exploit Mitigations Are Working Read More »

UK, New Zealand Accuse China of Cyberattacks on Government Entities

China, China APT, Government, Nation-State, New Zealand, UK / SecurityTicks

UK, New Zealand Accuse China of Cyberattacks on Government Entities 2024-03-26 at 12:46 By Ionut Arghire Australia and New Zealand support the UK in condemning Chinese hackers for targeting UK institutions and parliamentarians. The post UK, New Zealand Accuse China of Cyberattacks on Government Entities appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

UK, New Zealand Accuse China of Cyberattacks on Government Entities Read More »

US Treasury Slaps Sanctions on China-Linked APT31 Hackers

APT31, China APT, Cyberwarfare, Nation-State, Sanctions, Volt Typhoon / SecurityTicks

US Treasury Slaps Sanctions on China-Linked APT31 Hackers 2024-03-25 at 21:05 By Ryan Naraine The US Treasury Department sanctions a pair of Chinese hackers linked to “malicious cyber operations targeting US critical infrastructure sectors.” The post US Treasury Slaps Sanctions on China-Linked APT31 Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

US Treasury Slaps Sanctions on China-Linked APT31 Hackers Read More »

Russian APT29 Hackers Caught Targeting German Political Parties

APT29, Cozy Bear, Cyberwarfare, Mandiant, Nation-State, Nobelium / SecurityTicks

Russian APT29 Hackers Caught Targeting German Political Parties 2024-03-22 at 18:47 By Ryan Naraine Russia’s APT29 hacking group is expanding targets to political parties in Germany using a new backdoor variant tracked as Wineloader. The post Russian APT29 Hackers Caught Targeting German Political Parties appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Russian APT29 Hackers Caught Targeting German Political Parties Read More »

Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon

APT, China APT, Five Eyes, Government, Nation-State, Volt Typhoon / SecurityTicks

Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon 2024-03-20 at 15:01 By Ionut Arghire Government agencies in the Five Eyes countries warn critical infrastructure entities of Chinese state-sponsored hacking group Volt Typhoon. The post Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon appeared first on SecurityWeek. This article is

React to this headline:

Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon Read More »