Dysruption Hub reports: Puerto Rico officials say a Thanksgiving-week cyberattack on IT contractor Truenorth Corporation briefly disrupted systems at three major agencies but did not compromise citizen data, even as independent reporting describes a broader ransomware incident. Truenorth Corporation, an IT services firm that runs key systems for multiple Puerto Rico government agencies, was the…
The Australian Signals Directorate (ASD) has issued a bulletin about ongoing cyber attacks targeting unpatched Cisco IOS XE devices in the country with a previously undocumented implant known as BADCANDY. The activity, per the intelligence agency, involves the exploitation of CVE-2023-20198 (CVSS score: 10.0), a critical vulnerability that allows a remote, unauthenticated attacker to create…
Cybersecurity researchers have shed light on a new campaign targeting WordPress sites that disguises the malware as a security plugin. The plugin, which goes by the name “WP-antymalwary-bot.php,” comes with a variety of features to maintain access, hide itself from the admin dashboard, and execute remote code. “Pinging functionality that can report back to a…
Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. “Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileged Active Directory account named, ‘serviceaccount,’” eSentire said in a technical report published
The following notice was posted June 3 on Facebook.ย As of publication, there is no notice on their website, and although AMI indicates that APT73 is responsible for the attack, there is nothing on Basheโs leak site or any other leak site.ย ๐จ๐ฅ๐๐๐ก๐ง ๐ฃ๐จ๐๐๐๐ ๐ก๐ข๐ง๐๐๐ โ ๐๐ฌ๐๐๐ฅ๐ฆ๐๐๐จ๐ฅ๐๐ง๐ฌ ๐๐๐๐ฅ๐ง ๐ง๐ผ ๐ผ๐๐ฟ ๐๐ฎ๐น๐๐ฒ๐ฑ ๐ฐ๐น๐ถ๐ฒ๐ป๐๐, ๐ฝ๐ฎ๐ฟ๐๐ป๐ฒ๐ฟ๐, ๐๐๐ฎ๐ธ๐ฒ๐ต๐ผ๐น๐ฑ๐ฒ๐ฟ๐, ๐ฎ๐ป๐ฑ…
A month with no Critical-severity Windows bugs is overshadowed by a mass of Mariner mop-up Categories: X-ops Tags: threat research, featured, Microsoft, Patch Tuesday, zero days
The Telegram-based online marketplace known as HuiOne Guarantee and its vendors have cumulatively received at least $24 billion in cryptocurrency, dwarfing the now-defunct Hydra to become the largest online illicit marketplace to have ever operated. The figures, released by blockchain analytics firm Elliptic, show that monthly inflows have increased by 51% since July 2024. Huione…
