Nation-State - Security Ticks

Chinese APT Hacks 48 Government Organizations

China, espionage, Government, Nation-State / SecurityTicks

Chinese APT Hacks 48 Government Organizations 2024-03-19 at 16:02 By Ionut Arghire Earth Krahang, likely a penetration team of Chinese government contractor I-Soon, has compromised 48 government entities worldwide. The post Chinese APT Hacks 48 Government Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to […]

React to this headline:

Chinese APT Hacks 48 Government Organizations Read More »

Microsoft Says Russian Gov Hackers Stole Source Code After Spying on Executive Emails

APT, Incident Response, Malware & Threats, Microsoft, Midnight Blizzard, Nation-State, SolarWinds / SecurityTicks

Microsoft Says Russian Gov Hackers Stole Source Code After Spying on Executive Emails 2024-03-08 at 21:34 By Ryan Naraine Microsoft says the Midnight Blizzard APT group may still be poking around its internal network after stealing source code, spying on emails. The post Microsoft Says Russian Gov Hackers Stole Source Code After Spying on Executive

React to this headline:

Microsoft Says Russian Gov Hackers Stole Source Code After Spying on Executive Emails Read More »

The US is Bracing for Complex, Fast-Moving Threats to Elections This Year, FBI Director Warns

AI, Artificial Intelligence, Election, Nation-State / SecurityTicks

The US is Bracing for Complex, Fast-Moving Threats to Elections This Year, FBI Director Warns 2024-03-01 at 19:46 By Associated Press FBI Director Christopher Wray says advances in generative AI make it easier for election interference and meddling easier than before. The post The US is Bracing for Complex, Fast-Moving Threats to Elections This Year,

React to this headline:

The US is Bracing for Complex, Fast-Moving Threats to Elections This Year, FBI Director Warns Read More »

US Charges Iranian Over Cyberattacks on Government, Defense Organizations

cybercrime, Nation-State / SecurityTicks

US Charges Iranian Over Cyberattacks on Government, Defense Organizations 2024-03-01 at 17:01 By Eduard Kovacs The US has charged an Iranian company’s employee over cyberattacks on State and Treasury Departments and defense contractors. The post US Charges Iranian Over Cyberattacks on Government, Defense Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

US Charges Iranian Over Cyberattacks on Government, Defense Organizations Read More »

Biden Administration Will Investigate National Security Risks Posed by Chinese-Made ‘Smart Cars’

IoT Security, Nation-State / SecurityTicks

Biden Administration Will Investigate National Security Risks Posed by Chinese-Made ‘Smart Cars’ 2024-02-29 at 19:16 By Associated Press Government probe could lead to new regulations aimed at preventing China from using sophisticated technology in connected vehicles to track drivers and their personal information. The post Biden Administration Will Investigate National Security Risks Posed by Chinese-Made

React to this headline:

Biden Administration Will Investigate National Security Risks Posed by Chinese-Made ‘Smart Cars’ Read More »

Iranian Hackers Target Aviation and Defense Sectors in Middle East

Nation-State / SecurityTicks

Iranian Hackers Target Aviation and Defense Sectors in Middle East 2024-02-29 at 16:34 By Ionut Arghire An Iranian threat actor tracked as UNC1549 is abusing Azure infrastructure in attacks targeting organizations in the Middle East. The post Iranian Hackers Target Aviation and Defense Sectors in Middle East appeared first on SecurityWeek. This article is an

React to this headline:

Iranian Hackers Target Aviation and Defense Sectors in Middle East Read More »

Chinese Cyberspies Use New Malware in Ivanti VPN Attacks

China, espionage, Ivanti, Malware & Threats, Nation-State / SecurityTicks

Chinese Cyberspies Use New Malware in Ivanti VPN Attacks 2024-02-28 at 14:52 By Ionut Arghire Chinese threat actors target Ivanti VPN appliances with new malware designed to persist system upgrades. The post Chinese Cyberspies Use New Malware in Ivanti VPN Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Chinese Cyberspies Use New Malware in Ivanti VPN Attacks Read More »

US Government Urges Cleanup of Routers Infected by Russia’s APT28

APT28, botnet, Malware & Threats, Nation-State, Russia / SecurityTicks

US Government Urges Cleanup of Routers Infected by Russia’s APT28 2024-02-28 at 14:52 By Ionut Arghire The US government says Russia’s APT28 group compromised Ubiquiti EdgeRouters to run cyberespionage operations worldwide. The post US Government Urges Cleanup of Routers Infected by Russia’s APT28 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

US Government Urges Cleanup of Routers Infected by Russia’s APT28 Read More »

Russian Cyberspies Targeting Cloud Infrastructure via Dormant Accounts

APT29, CISA, Cozy Bear, Malware & Threats, Midnight Blizzard, Nation-State, Uncategorized / SecurityTicks

Russian Cyberspies Targeting Cloud Infrastructure via Dormant Accounts 2024-02-26 at 19:17 By Ionut Arghire US government and allies expose TTPs used by notorious Russian hacking teams and warn of the targeting of dormant cloud accounts. The post Russian Cyberspies Targeting Cloud Infrastructure via Dormant Accounts appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Russian Cyberspies Targeting Cloud Infrastructure via Dormant Accounts Read More »

State-Sponsored Group Blamed for Change Healthcare Breach

8-K filing, Data Breaches, healthcare, Nation-State, SEC disclosure, United Healthcare / SecurityTicks

State-Sponsored Group Blamed for Change Healthcare Breach 2024-02-26 at 17:33 By Ionut Arghire UnitedHealth Group is blaming a state-sponsored threat actor for a disruptive cyberattack on its subsidiary Change Healthcare. The post State-Sponsored Group Blamed for Change Healthcare Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

State-Sponsored Group Blamed for Change Healthcare Breach Read More »

Russian Turla Cyberspies Target Polish NGOs With New Backdoor

backdoor, Malware, Malware & Threats, Nation-State, Russia, Turla / SecurityTicks

Russian Turla Cyberspies Target Polish NGOs With New Backdoor 2024-02-22 at 18:01 By Ionut Arghire Russian state-sponsored threat actor Turla has been using a new backdoor in recent attacks targeting Polish NGOs. The post Russian Turla Cyberspies Target Polish NGOs With New Backdoor appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Russian Turla Cyberspies Target Polish NGOs With New Backdoor Read More »

Russian Cyberspies Exploit Roundcube Flaws Against European Governments

Government, Nation-State, Roundcube, Russia / SecurityTicks

Russian Cyberspies Exploit Roundcube Flaws Against European Governments 2024-02-19 at 15:01 By Ionut Arghire Russian cyberespionage group targets European government, military, and critical infrastructure entities via Roundcube vulnerabilities. The post Russian Cyberspies Exploit Roundcube Flaws Against European Governments appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Russian Cyberspies Exploit Roundcube Flaws Against European Governments Read More »

FBI Dismantles Ubiquiti Router Botnet Controlled by Russian Cyberspies

APT28, FBI, Forest Blizzard, KV Botnet, Malware & Threats, Nation-State / SecurityTicks

FBI Dismantles Ubiquiti Router Botnet Controlled by Russian Cyberspies 2024-02-15 at 21:46 By Ryan Naraine The US government says it has neutralized a network of hundreds of Ubiquiti Edge OS routers under the control of the Russia’s APT28 hackers. The post FBI Dismantles Ubiquiti Router Botnet Controlled by Russian Cyberspies appeared first on SecurityWeek. This

React to this headline:

FBI Dismantles Ubiquiti Router Botnet Controlled by Russian Cyberspies Read More »

Stealthy Cyberespionage Campaign Remained Undiscovered for Two Years

China, espionage, Nation-State / SecurityTicks

Stealthy Cyberespionage Campaign Remained Undiscovered for Two Years 2024-02-12 at 16:16 By Ionut Arghire A possibly China-linked threat actor uses a custom backdoor in a cyberespionage campaign ongoing since at least 2021. The post Stealthy Cyberespionage Campaign Remained Undiscovered for Two Years appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Stealthy Cyberespionage Campaign Remained Undiscovered for Two Years Read More »

Iran Ramps Up Cyberattacks on Israel Amid Hamas Conflict: Microsoft

Iran, Israel, Nation-State / SecurityTicks

Iran Ramps Up Cyberattacks on Israel Amid Hamas Conflict: Microsoft 2024-02-08 at 17:47 By Ionut Arghire Iran’s offensive cyber operations against Israel went from chaotic in October 2023 to targeting new geographies a month later. The post Iran Ramps Up Cyberattacks on Israel Amid Hamas Conflict: Microsoft appeared first on SecurityWeek. This article is an

React to this headline:

Iran Ramps Up Cyberattacks on Israel Amid Hamas Conflict: Microsoft Read More »

Fortinet: APTs Exploiting FortiOS Vulnerabilities in Critical Infrastructure Attacks

Nation-State / SecurityTicks

Fortinet: APTs Exploiting FortiOS Vulnerabilities in Critical Infrastructure Attacks 2024-02-08 at 17:01 By Eduard Kovacs Fortinet warns that Chinese and other APTs are exploiting CVE-2022-42475 and CVE-2023-27997 in attacks. The post Fortinet: APTs Exploiting FortiOS Vulnerabilities in Critical Infrastructure Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Fortinet: APTs Exploiting FortiOS Vulnerabilities in Critical Infrastructure Attacks Read More »

CISA: China’s Volt Typhoon Hackers Planning Critical Infrastructure Disruption

China, CISA, critical infrastructure, Malware & Threats, Nation-State, Volt Typhoon / SecurityTicks

CISA: China’s Volt Typhoon Hackers Planning Critical Infrastructure Disruption 2024-02-08 at 01:01 By Ryan Naraine New CISA alert includes technical mitigations to harden attack surfaces and instructions to hunt for the Chinese government-backed hackers. The post CISA: China’s Volt Typhoon Hackers Planning Critical Infrastructure Disruption appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

CISA: China’s Volt Typhoon Hackers Planning Critical Infrastructure Disruption Read More »

In Other News: Palo Alto Loses Patent Lawsuit, Identity Firms Get Funding, Government Hackers

Cybersecurity Funding, In Other News, Nation-State / SecurityTicks

In Other News: Palo Alto Loses Patent Lawsuit, Identity Firms Get Funding, Government Hackers 2024-02-03 at 13:31 By SecurityWeek News Noteworthy stories that might have slipped under the radar: Palo Alto Networks ordered to pay $150 million in patent lawsuit, identity solutions firms get big funding, government hacker techniques. The post In Other News: Palo

React to this headline:

In Other News: Palo Alto Loses Patent Lawsuit, Identity Firms Get Funding, Government Hackers Read More »

US Slaps Sanctions on ‘Dangerous’ Iranian Hackers Linked to Water Utility Hacks

critical infrastructure, Iran, Israel, Malware & Threats, Nation-State, Unitronics / SecurityTicks

US Slaps Sanctions on ‘Dangerous’ Iranian Hackers Linked to Water Utility Hacks 2024-02-02 at 22:02 By Ryan Naraine The US government slaps sanctions against six Iranian government officials linked to cyberattacks against Israeli PLC vendor Unitronics. The post US Slaps Sanctions on ‘Dangerous’ Iranian Hackers Linked to Water Utility Hacks appeared first on SecurityWeek. This

React to this headline:

US Slaps Sanctions on ‘Dangerous’ Iranian Hackers Linked to Water Utility Hacks Read More »

Cloudflare Hacked by Suspected State-Sponsored Threat Actor

Cloudflare, Featured, Nation-State / SecurityTicks

Cloudflare Hacked by Suspected State-Sponsored Threat Actor 2024-02-02 at 13:46 By Ionut Arghire A nation-state threat actor accessed internal Cloudflare systems using credentials stolen during the Okta hack. The post Cloudflare Hacked by Suspected State-Sponsored Threat Actor appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Cloudflare Hacked by Suspected State-Sponsored Threat Actor Read More »