Damien Bancal reports: US and European agencies have updated their joint warning on Akira: nearly 250 million dollars in ransom demands, a refined attack chain and a clear inheritance from the Conti gang. An updated advisory from US and European agencies, ransom demands estimated at nearly 250 million dollars, focused exploitation of VPNs and remote…
The Connexion reports: A large-scale trial is opening in Lyon this week after the discovery of a major data leak at a French work agency Adecco that left 72,000 victims in one of the most serious data-related frauds ever uncovered in France. 16 people are in the dock at the Lyon correctional court facing 22…
The China-linked threat actor known as UNC5174 has been attributed to a new campaign that leverages a variant of a known malware dubbed SNOWLIGHT and a new open-source tool called VShell to infect Linux systems. “Threat actors are increasingly using open source tools in their arsenals for cost-effectiveness and obfuscation to save money and, in…
The Hindustan Times reports: The Kerala Police Crime Branch’s move to seize the mobile phone of Aniru Ashokan, a reporter from a Malayalam daily, has triggered a wave of support from local journalists across the state. According to PTI, the Crime Branch’s action came after the journalist reported on the alleged breach of sensitive data…
Google has stepped in to address a security flaw that could have made it possible to brute-force an account’s recovery phone number, potentially exposing them to privacy and security risks. The issue, according to Singaporean security researcher “brutecat,” leverages an issue in the company’s account recovery feature. That said, exploiting the vulnerability hinges on several…
Telecommunications and manufacturing sectors in Central and South Asian countries have emerged as the target of an ongoing campaign distributing a new variant of a known malware called PlugX (aka Korplug or SOGU). “The new variant’s features overlap with both the RainyDay and Turian backdoors, including abuse of the same legitimate applications for DLL side-loading,…
Most MSPs and MSSPs know how to deliver effective security. The challenge is helping prospects understand why it matters in business terms. Too often, sales conversations stall because prospects are overwhelmed, skeptical, or tired of fear-based messaging. That’s why we created ”Getting to Yes”: An Anti-Sales Guide for MSPs. This guide helps service providers transform…
