Microsoft primes 71 fixes for May Patch Tuesday
Five issues actively exploited in the wild, but the real excitement may have been handled in advance
Similar Posts
Iran’s Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware
The Iranian nation-state hacking group known as Charming Kitten has been observed deploying a C++ variant of a known malware called BellaCiao. Russian cybersecurity company Kaspersky, which dubbed the new version BellaCPP, said it discovered the artifact as part of a “recent” investigation into a compromised machine in Asia that was also infected with the…
Justice Department Announces Seizure of Stolen-Password Database Used in Bank Account Takeover Fraud
Bys sFrom the U.S. Attorney’s Office, Northern District of Georgia: Fraud ring responsible for more than $28 million in unauthorized bank transfers from U.S. victims The Justice Department today announced the seizure of a web domain and database used in furtherance of a scheme to target and defraud Americans through bank account takeover fraud. The domain,……
Almost one month after Brain Cipher claimed to have attacked them, Pulmonary Physicians of South Florida has yet to publicly confirm or deny any breach
Bys sPulmonary Physicians of South Florida (PPSF) describe themselves as a group of experienced and highly qualified pulmonary, critical care and sleep medicine physicians. “We provide comprehensive, state of the art diagnosis and treatment of diseases of the lungs in every hospital in Miami-Dade County, as well as in select hospitals in Broward and Monroe counties,”…
Connecticut Senate Bill Raises the Stakes on Data Breach Response
Bys sHayley Steele and Gregory Szewczyk of Ballard Spahr write: A new bill introduced in Connecticut—Connecticut Senate Bill 117, An Act Concerning Breaches of Security Involving Electronic Personal Information—would create mandatory forensic examination requirements for entities that experience a “massive breach of security,” defined as a data breach affecting at least 100,000 Connecticut residents, and imposes……
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
Bys sAn Iranian hacking group affiliated with Iran’s Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations. The activity, which has primarily singled out IT providers and government sectors, has been attributed to a threat cluster tracked by Check Point Research
Critical Infrastructure Ransomware Attack Tracker Reaches 2,000 Incidents
Bys sTemple University’s Critical Infrastructure Ransomware Attacks (CIRA) database now contains over 2,000 entries. The post Critical Infrastructure Ransomware Attack Tracker Reaches 2,000 Incidents appeared first on SecurityWeek.