Nation-State - Security Ticks

Iranian Hackers Lurked for 8 Months in Government Network

Featured, Iran, Nation-State / SecurityTicks

Iranian Hackers Lurked for 8 Months in Government Network 20/10/2023 at 16:31 By Ionut Arghire Iran-linked hacking group Crambus spent eight months inside a compromised network of a Middle Eastern government, Broadcom’s Symantec cybersecurity unit reports. The post Iranian Hackers Lurked for 8 Months in Government Network appeared first on SecurityWeek. This article is an […]

React to this headline:

Iranian Hackers Lurked for 8 Months in Government Network Read More »

FBI: Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program

Nation-State, North Korea / SecurityTicks

FBI: Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program 19/10/2023 at 18:31 By Associated Press Thousands of IT workers contracting with U.S. firms have secretly sent millions of dollars to North Korea to fund its missile program. The post FBI: Thousands of Remote IT Workers Sent Wages to

React to this headline:

FBI: Thousands of Remote IT Workers Sent Wages to North Korea to Help Fund Weapons Program Read More »

Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw

China, CVE-2023-38831, cybercrime, Malware & Threats, Nation-State, Russia, Sandworm, Vulnerabilities, WinRAR / SecurityTicks

Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw 18/10/2023 at 20:55 By Ryan Naraine Google says it is still catching government-backed groups linked to China and Russia launching WinRAR exploits in targeted attacks. The post Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw Read More »

Microsoft Blames Nation-State Threat Actor for Confluence Zero-Day Attacks

Atlassian, Confluence, CVE-2023-22515, Cyberwarfare, Incident Response, Nation-State, Storm-0062, Vulnerabilities / SecurityTicks

Microsoft Blames Nation-State Threat Actor for Confluence Zero-Day Attacks 11/10/2023 at 03:01 By Ryan Naraine Microsoft says an APT group tracked as Storm-0062 has been hacking Confluence installations since mid-September, three weeks before Atlassian’s disclosure. The post Microsoft Blames Nation-State Threat Actor for Confluence Zero-Day Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Microsoft Blames Nation-State Threat Actor for Confluence Zero-Day Attacks Read More »

Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day

apple, iOS, iOS 17.0.3, Malware & Threats, Mobile & Wireless, Nation-State, Vulnerabilities, Zero-Day / SecurityTicks

Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day 04/10/2023 at 22:16 By Ryan Naraine Apple’s cat-and-mouse struggles with zero-day exploits on its flagship iOS platform is showing no signs of slowing down. The post Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Apple Warns of Newly Exploited iOS 17 Kernel Zero-Day Read More »

AWS Using MadPot Decoy System to Disrupt APTs, Botnets

AWS, cloud security, cybercrime, MadPot, Nation-State, Sandworm, Volt Typhoon / SecurityTicks

AWS Using MadPot Decoy System to Disrupt APTs, Botnets 29/09/2023 at 21:01 By Ryan Naraine AWS says an internal threat intel decoy system called MadPot has successfully trapped nation state-backed APTs like Volt Typhoon and Sandworm. The post AWS Using MadPot Decoy System to Disrupt APTs, Botnets appeared first on SecurityWeek. This article is an

React to this headline:

AWS Using MadPot Decoy System to Disrupt APTs, Botnets Read More »

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack

China, Featured, Nation-State / SecurityTicks

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack 29/09/2023 at 06:16 By AFP The US State Department said that hackers took around 60,000 emails in an attack which Microsoft has blamed on China. The post US State Department Says 60,000 Emails Taken in Alleged Chinese Hack appeared first on SecurityWeek. This article

React to this headline:

US State Department Says 60,000 Emails Taken in Alleged Chinese Hack Read More »

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware

Cisco, firmware, Malware & Threats, MoonBounce, Nation-State, routers, Security Infrastructure / SecurityTicks

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware 27/09/2023 at 21:02 By Ryan Naraine The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently hop around the corporate networks of U.S. and Japanese companies. The post Chinese Gov Hackers Caught

React to this headline:

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware Read More »

Zero Day Summer: Microsoft Warns of Fresh New Software Exploits

Malware & Threats, Microsoft, Microsoft Office, Nation-State, Patch Tuesday, Vulnerabilities, Zero-Day / SecurityTicks

Zero Day Summer: Microsoft Warns of Fresh New Software Exploits 12/09/2023 at 22:16 By Ryan Naraine Microsoft’s struggles with zero-day exploits rolled into a new month with a fresh Patch Tuesday warning about malware attacks in the wild. The post Zero Day Summer: Microsoft Warns of Fresh New Software Exploits appeared first on SecurityWeek. This

React to this headline:

Zero Day Summer: Microsoft Warns of Fresh New Software Exploits Read More »

Adobe Says Critical PDF Reader Zero-Day Being Exploited

Adobe, CVE-2023-26369, Data Breaches, Nation-State, reader, Vulnerabilities / SecurityTicks

Adobe Says Critical PDF Reader Zero-Day Being Exploited 12/09/2023 at 19:47 By Ryan Naraine Adobe raises an alarm for new in-the-wild zero-day attacks hitting users of its widely deployed Adobe Acrobat and Reader product. The post Adobe Says Critical PDF Reader Zero-Day Being Exploited appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Adobe Says Critical PDF Reader Zero-Day Being Exploited Read More »

US Marks 22 Years Since 9/11 Terrorist Attacks

Featured, Nation-State / SecurityTicks

US Marks 22 Years Since 9/11 Terrorist Attacks 11/09/2023 at 22:16 By SecurityWeek News One organization is hoping to transform the anniversary of 9/11 into a day of doing good. The post US Marks 22 Years Since 9/11 Terrorist Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

US Marks 22 Years Since 9/11 Terrorist Attacks Read More »

Apple Patches Actively Exploited iOS, macOS Zero-Days

apple, Citizen Lab, CVE-2023-41061, CVE-2023-41064, Malware & Threats, Mobile & Wireless, Nation-State, Vulnerabilities / SecurityTicks

Apple Patches Actively Exploited iOS, macOS Zero-Days 07/09/2023 at 23:31 By Ryan Naraine Apple pushes out an urgent point-update to its flagship iOS and macOS platforms to fix a pair of security defects being exploited in the wild. The post Apple Patches Actively Exploited iOS, macOS Zero-Days appeared first on SecurityWeek. This article is an

React to this headline:

Apple Patches Actively Exploited iOS, macOS Zero-Days Read More »

Rigged Software and Zero-Days: North Korean APT Caught Hacking Security Researchers

Google TAG, Lazarus, Malware & Threats, Nation-State, North Korea, Vulnerabilities / SecurityTicks

Rigged Software and Zero-Days: North Korean APT Caught Hacking Security Researchers 07/09/2023 at 23:31 By Ryan Naraine Google again catches a North Korean APT actor targeting security researchers with zero-days and rigged software tools. The post Rigged Software and Zero-Days: North Korean APT Caught Hacking Security Researchers appeared first on SecurityWeek. This article is an

React to this headline:

Rigged Software and Zero-Days: North Korean APT Caught Hacking Security Researchers Read More »

Crash Dump Error: How a Chinese Espionage Group Exploited Microsoft’s Mistakes

APT, China, cloud security, Data Breaches, M365, Microsoft, Nation-State / SecurityTicks

Crash Dump Error: How a Chinese Espionage Group Exploited Microsoft’s Mistakes 07/09/2023 at 00:03 By Ryan Naraine Microsoft reveals how a crash dump from 2021 inadvertently exposed a key that Chinese cyberspies later leveraged to hack US government emails. The post Crash Dump Error: How a Chinese Espionage Group Exploited Microsoft’s Mistakes appeared first on

React to this headline:

Crash Dump Error: How a Chinese Espionage Group Exploited Microsoft’s Mistakes Read More »

Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint

China, Flax Typhoon, LOLbins, Malware & Threats, Nation-State, Threat Intelligence / SecurityTicks

Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint 24/08/2023 at 23:34 By Ryan Naraine Microsoft warns that Chinese spies are hacking into Taiwanese organizations with minimal use of malware and by abusing legitimate software. The post Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint appeared first on SecurityWeek. This article is

React to this headline:

Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint Read More »

Suspected N. Korean Hackers Target S. Korea-US Drills

Cyberwarfare, Nation-State, North Korea / SecurityTicks

Suspected N. Korean Hackers Target S. Korea-US Drills 20/08/2023 at 14:17 By AFP North Korea-linked “Kimsuky” hackers carried out “continuous malicious email attacks” on contractors working at the war simulation centre. The post Suspected N. Korean Hackers Target S. Korea-US Drills appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Suspected N. Korean Hackers Target S. Korea-US Drills Read More »

Patch Tuesday: Microsoft (Finally) Patches Exploited Office Zero-Days

Cyberwarfare, Microsoft, Nation-State, patch, Patch Tuesday, Vulnerabilities / SecurityTicks

Patch Tuesday: Microsoft (Finally) Patches Exploited Office Zero-Days 08/08/2023 at 23:17 By Ryan Naraine Patch Tuesday: A month after confirming active exploitation of Office code execution flaws, Microsoft has shipped patches for multiple affected products. The post Patch Tuesday: Microsoft (Finally) Patches Exploited Office Zero-Days appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Patch Tuesday: Microsoft (Finally) Patches Exploited Office Zero-Days Read More »

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App

cloud security, Featured, Nation-State / SecurityTicks

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App 03/08/2023 at 01:01 By Ryan Naraine Microsoft says a Russian government-linked hacking group is using its Microsoft Teams chat app to phish for credentials at targeted organizations. The post Microsoft Catches Russian Government Hackers Phishing with Teams Chat App appeared first on SecurityWeek. This article

React to this headline:

Microsoft Catches Russian Government Hackers Phishing with Teams Chat App Read More »

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups

APT, BlackBasta, cloud security, Cloudzy, Cyberwarfare, Halcyon, Nation-State, Ransomware / SecurityTicks

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups 01/08/2023 at 20:15 By Ionut Arghire Researchers unmask an Iranian-run company providing command-and-control services to hacking groups, including state-sponsored APT actors. The post Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Iran-Run ISP ‘Cloudzy’ Caught Supporting Nation-State APTs, Cybercrime Hacking Groups Read More »

Ex-NSA Official Harry Coker Tapped for National Cyber Director Job

Government, Harry Coker, Nation-State, National Cybersecurity Strategy, Tracking & Law Enforcement / SecurityTicks

Ex-NSA Official Harry Coker Tapped for National Cyber Director Job 26/07/2023 at 20:19 By Ryan Naraine The Biden administration has nominated former Navy commander Harry Coker to replace the retired Chris Inglis. The post Ex-NSA Official Harry Coker Tapped for National Cyber Director Job appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Ex-NSA Official Harry Coker Tapped for National Cyber Director Job Read More »