School district is investigating authenticity of the trove
Duo paid bribes and kickbacks to patient marketers
La Commission des valeurs mobilières de Hong Kong (SFC) a blâmé et sanctionné Six Fook Securities (ou Luk Fook Securities) pour des lacunes importantes dans ses mesures de cybersécurité. L'incident, une attaque par ransomware survenue en septembre 2022, a causé des perturbations majeures aux infrast...
The group continued to use the LookBack backdoor, but also several new types of malware
The behavior of the actors was reportedly identical to what was described by Minerva Labs in 2021
All about the new look for Hacking The Cloud v2.
The advisory suggests Zinc has targeted media, defense and aerospace, and IT services
The vulnerabilities were first discovered by Vietnamese cybersecurity firm GTSC
On a network and need credentials? Try password spraying the domain controller directly.
A few years ago, I wrote this password spray tool called gospray that was used succesfully in a couple of engagements since. It does an LDAP bind directly against the domain controller to validate credentials. T...
NCSC CEO, Lindy Cameron, outlines the UK's observations of the cyber dimension of the Russia-Ukraine conflict
The liability rules allow for compensation for damage when manufacturers fail to address cybersecurity vulnerabilities
In October 2019, a security researcher found a devastating vulnerability in Tornado.cash, a decentralized, non-custodial mixer on the Ethereum network. Tornado.cash uses zero-knowledge proofs (ZKPs) to allow its users to privately deposit and withdraw funds. The proofs are supposed to guarantee that...
The tool was written in Chinese and seemed China-based due to its C2 infrastructure
Cisco Talos discovered the malicious campaign in August 2022
En septembre 2022, Toulouse INP a été victime d'une cyberattaque avec le ransomware AvosLocker. L'attaque a été déclenchée via un compte étudiant compromis et a bloqué l'annuaire, les mécanismes d'authentification et les capacités d'accès physique aux bâtiments. Des mesures ont été prises pour rétab...
Data samples contain email addresses, hashed passwords and user IDs, other PII
PwC study finds organizations have a long way to go on security
Report reveals surging cloud bills for crypto-jacking victims
Tax agency says automated tools are to blame
This could reflect threat actors shifting their tactics to rely on more elusive malware