Iranian APT groups targeted critical infrastructure entities by exploiting known Microsoft Exchange Server and Fortinet vulnerabilities using malicious and legitimate tools.
Staff Correspondent at CPO Magazine
Alicia Hope has been a journalist for more than 5 years, reporting on technology, cyber security and data privacy news.
The US authorities offered a $10 million reward for information to identify or locate REvil and DarkSide ransomware gang leaders, and $5 million for their affiliates preparing attacks.
Palo Alto Networks identified a Chinese cyber espionage campaign targeting 370 critical infrastructure, education, healthcare, and technology organizations through vulnerable Zoho servers.
Costco sent a data breach notification to its customers after discovering a credit card skimmer at one of its stores. Several customers complained of unauthorized transactions.
Ransomware gangs search for non-public financial information that could affect stock prices during mergers and acquisitions and threaten to publish it to coerce the victim to pay.
Suspects affiliated with a ransomware-as-a-service (RaaS) platform used in LockerGoga, MegaCortex, and Dharma ransomware attacks were detained in Ukraine and Switzerland.
CISA directs federal agencies to adhere to the vulnerability management catalog and patch 300 exploited vulnerabilities assigned CVE IDs in 2021 within 2 weeks and 6 months for previous ones.
Desorden group hacked Centara Hotels & Resorts again after negotiations for ransom payment collapsed and the hotel recovers part of the databases stolen in the first data breach.
Lazarus hacking group found to be developing capabilities in supply chain attacks and using the MATA framework to conduct cyber espionage on the defense industry.
Cyber attack disrupted Iran’s gas stations accepting government-issued smart cards for subsidized fuel while hacked electronic signs mocked Supreme leader Khamenei and demanded gasoline.
