Nation-State - Security Ticks

Volexity Catches Chinese Hackers Exploiting Ivanti VPN Zero-Days

Ivanti, Nation-State, Volexity, VPN, Vulnerabilities, Zero-Day / SecurityTicks

Volexity Catches Chinese Hackers Exploiting Ivanti VPN Zero-Days 2024-01-11 at 00:01 By Ryan Naraine Ivanti confirms active zero-day exploits, ships pre-patch mitigations, but says comprehensive fixes won’t be available until January 22. The post Volexity Catches Chinese Hackers Exploiting Ivanti VPN Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed […]

React to this headline:

Volexity Catches Chinese Hackers Exploiting Ivanti VPN Zero-Days Read More »

Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet

Black Lotus Labs, Featured, Fortinet, Nation-State, Netgear, Network Security, Volt Typhoon / SecurityTicks

Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet 13/12/2023 at 20:31 By Ryan Naraine Malware hunters have set eyes on an impossible to kill botnet packed with end-of-life SOHO routers and connects it to a Chinese APT targeting US critical infrastructure. The post Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet

React to this headline:

Chinese APT Volt Typhoon Linked to Unkillable SOHO Router Botnet Read More »

Apple Sets Trap to Catch iMessage Impersonators

Featured, iMessage, iOS 17.2, macOS 14.2, Mobile & Wireless, Nation-State, nso group, Zero-Day / SecurityTicks

Apple Sets Trap to Catch iMessage Impersonators 12/12/2023 at 20:33 By Ryan Naraine New iMessage Contact Key Verification feature in Apple’s iOS and macOS platforms help catch impersonators on its iMessage service. The post Apple Sets Trap to Catch iMessage Impersonators appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Apple Sets Trap to Catch iMessage Impersonators Read More »

CISA Issues Warning for Russian ‘Star Blizzard’ APT Spear-Phishing Operation

CISA, Cyberwarfare, email security, Microsoft, Nation-State, Russia, Star Blizzard, Threat Intelligence / SecurityTicks

CISA Issues Warning for Russian ‘Star Blizzard’ APT Spear-Phishing Operation 08/12/2023 at 00:48 By Ryan Naraine The US cybersecurity agency calls attention to a Russian APT targeting academia, defense, governmental organizations, NGOs and think-tanks. The post CISA Issues Warning for Russian ‘Star Blizzard’ APT Spear-Phishing Operation appeared first on SecurityWeek. This article is an excerpt

React to this headline:

CISA Issues Warning for Russian ‘Star Blizzard’ APT Spear-Phishing Operation Read More »

North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report

Cryptocurrency, cybercrime, Data Breaches, Kimsuky, Lazarus, Nation-State, North Korea, Threat Intelligence / SecurityTicks

North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report 04/12/2023 at 18:16 By Ionut Arghire Recorded Future calculates that North Korean state-sponsored threat actors are believed to have stolen more than $3 billion in cryptocurrency. The post North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report appeared first on SecurityWeek. This

React to this headline:

North Korean Hackers Have Stolen Over $3 Billion in Cryptocurrency: Report Read More »

State-Backed Hackers a Threat to Australia, Agency Warns

Australia, Nation-State, Threat Intelligence / SecurityTicks

State-Backed Hackers a Threat to Australia, Agency Warns 15/11/2023 at 13:46 By AFP The AUKUS partnership, with its focus on nuclear submarines and other advanced military capabilities, is likely a target for state actors looking to steal intellectual property. The post State-Backed Hackers a Threat to Australia, Agency Warns appeared first on SecurityWeek. This article

React to this headline:

State-Backed Hackers a Threat to Australia, Agency Warns Read More »

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes

Cyberwarfare, Featured, ICS, ICS malware, ICS/OT, Malware & Threats, Mandiant, Nation-State, OT, Russia, Sandworm, Ukraine / SecurityTicks

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes 09/11/2023 at 12:16 By Ryan Naraine Mandiant says Russia’s Sandworm hackers used a novel OT attack to cause power outages that coincided with mass missile strikes on critical infrastructure across Ukraine. The post Russian Hackers Used Novel OT Attack to Disrupt

React to this headline:

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes Read More »

New MacOS Malware Linked to North Korean Hackers

macOS, Malware, Malware & Threats, Nation-State, North Korea / SecurityTicks

New MacOS Malware Linked to North Korean Hackers 07/11/2023 at 18:04 By Kevin Townsend New macOS malware, tracked by Jamf as ObjCShellz, is likely being used by North Korean hackers to target crypto exchanges The post New MacOS Malware Linked to North Korean Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

New MacOS Malware Linked to North Korean Hackers Read More »

Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks

Check Point, Cyberwarfare, Iran, Israel, LionTail, Malware & Threats, Nation-State, Scarred Manticore / SecurityTicks

Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks 01/11/2023 at 17:31 By Ionut Arghire Check Point reports that an Iranian APT has been observed using a new malware framework in targeted attacks in the Middle East. The post Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks appeared first on SecurityWeek. This article is

React to this headline:

Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks Read More »

Canada Bans WeChat and Kaspersky on Government Phones

Canada, Nation-State, Privacy / SecurityTicks

Canada Bans WeChat and Kaspersky on Government Phones 30/10/2023 at 22:01 By AFP The Chief Information Officer of Canada determined that WeChat and Kaspersky applications present an unacceptable level of risk to privacy and security. The post Canada Bans WeChat and Kaspersky on Government Phones appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Canada Bans WeChat and Kaspersky on Government Phones Read More »

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure

critical infrastructure, Featured, ICS/OT, Nation-State, Volt Typhoon / SecurityTicks

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure 25/10/2023 at 19:17 By Ryan Naraine Mandiant’s Chief analyst urges critical infrastructure defenders to work on finding and removing traces of Volt Typhoon, a Chinese government-backed hacking team caught in a series of eyebrow-raising attacks against targets in Guam and the

React to this headline:

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure Read More »

Canada: Lawmakers Targeted by China-Linked ‘Spamouflage’ Disinformation

China, Nation-State / SecurityTicks

Canada: Lawmakers Targeted by China-Linked ‘Spamouflage’ Disinformation 24/10/2023 at 20:02 By AFP Canada on warned of a “Spamouflage” disinformation campaign linked to China that used waves of online posts and deepfake videos. The post Canada: Lawmakers Targeted by China-Linked ‘Spamouflage’ Disinformation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Canada: Lawmakers Targeted by China-Linked ‘Spamouflage’ Disinformation Read More »

Iranian Hackers Lurked for 8 Months in Government Network

Featured, Iran, Nation-State / SecurityTicks

Iranian Hackers Lurked for 8 Months in Government Network 20/10/2023 at 16:31 By Ionut Arghire Iran-linked hacking group Crambus spent eight months inside a compromised network of a Middle Eastern government, Broadcom’s Symantec cybersecurity unit reports. The post Iranian Hackers Lurked for 8 Months in Government Network appeared first on SecurityWeek. This article is an

React to this headline:

Iranian Hackers Lurked for 8 Months in Government Network Read More »

FBI: Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program

Nation-State, North Korea / SecurityTicks

FBI: Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program 19/10/2023 at 18:31 By Associated Press Thousands of IT workers contracting with U.S. firms have secretly sent millions of dollars to North Korea to fund its missile program. The post FBI: Thousands of Remote IT Workers Sent Wages to

React to this headline:

FBI: Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program Read More »

Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw

China, CVE-2023-38831, cybercrime, Malware & Threats, Nation-State, Russia, Sandworm, Vulnerabilities, WinRAR / SecurityTicks

Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw 18/10/2023 at 20:55 By Ryan Naraine Google says it is still catching government-backed groups linked to China and Russia launching WinRAR exploits in targeted attacks. The post Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw Read More »

Microsoft Blames Nation-State Threat Actor for Confluence Zero-Day Attacks

Atlassian, Confluence, CVE-2023-22515, Cyberwarfare, Incident Response, Nation-State, Storm-0062, Vulnerabilities / SecurityTicks

Microsoft Blames Nation-State Threat Actor for Confluence Zero-Day Attacks 11/10/2023 at 03:01 By Ryan Naraine Microsoft says an APT group tracked as Storm-0062 has been hacking Confluence installations since mid-September, three weeks before Atlassian’s disclosure. The post Microsoft Blames Nation-State Threat Actor for Confluence Zero-Day Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Microsoft Blames Nation-State Threat Actor for Confluence Zero-Day Attacks Read More »

Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day

apple, iOS, iOS 17.0.3, Malware & Threats, Mobile & Wireless, Nation-State, Vulnerabilities, Zero-Day / SecurityTicks

Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day 04/10/2023 at 22:16 By Ryan Naraine Apple’s cat-and-mouse struggles with zero-day exploits on its flagship iOS platform is showing no signs of slowing down. The post Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day Read More »

AWS Using MadPot Decoy System to Disrupt APTs, Botnets

AWS, cloud security, cybercrime, MadPot, Nation-State, Sandworm, Volt Typhoon / SecurityTicks

AWS Using MadPot Decoy System to Disrupt APTs, Botnets 29/09/2023 at 21:01 By Ryan Naraine AWS says an internal threat intel decoy system called MadPot has successfully trapped nation state-backed APTs like Volt Typhoon and Sandworm. The post AWS Using MadPot Decoy System to Disrupt APTs, Botnets appeared first on SecurityWeek. This article is an

React to this headline:

AWS Using MadPot Decoy System to Disrupt APTs, Botnets Read More »

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack

China, Featured, Nation-State / SecurityTicks

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack 29/09/2023 at 06:16 By AFP The US State Department said that hackers took around 60,000 emails in an attack which Microsoft has blamed on China. The post US State Department Says 60,000 Emails Taken in Alleged Chinese Hack appeared first on SecurityWeek. This article

React to this headline:

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack Read More »

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware

Cisco, firmware, Malware & Threats, MoonBounce, Nation-State, routers, Security Infrastructure / SecurityTicks

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware 27/09/2023 at 21:02 By Ryan Naraine The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently hop around the corporate networks of U.S. and Japanese companies. The post Chinese Gov Hackers Caught

React to this headline:

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware Read More »