Security News > 2024 > August

FBI: RansomHub ransomware breached 210 victims since February
2024-08-29 18:48

​Since surfacing in February 2024, RansomHub ransomware affiliates have breached over 200 victims from a wide range of critical U.S. infrastructure sectors. [...]

Feds claim sinister sysadmin locked up thousands of Windows workstations, demanded ransom
2024-08-29 18:30

Sordid search history 'evidence' in case that could see him spend 35 years for extortion and wire fraud A former infrastructure engineer who allegedly locked IT department colleagues out of their...

Fake Palo Alto GlobalProtect used as lure to backdoor enterprises
2024-08-29 18:29

Threat actors target Middle Eastern organizations with malware disguised as the legitimate Palo Alto GlobalProtect Tool that can steal data and execute remote PowerShell commands to infiltrate...

Windows 10 KB5041582 update released with 5 changes and fixes
2024-08-29 17:37

​Microsoft has released the August 2024 preview update for Windows 10, version 22H2, with fixes for issues causing system freezes and memory leaks. [...]

Rock Chrome hard enough and get paid half a million
2024-08-29 16:30

Google revises Chrome Vulnerability Rewards Program with higher payouts for bug hunters Google's Chrome Vulnerability Rewards Program (VRP) is now significantly more rewarding – with a top payout...

Vietnamese Human Rights Group Targeted in Multi-Year Cyberattack by APT32
2024-08-29 16:15

A non-profit supporting Vietnamese human rights has been the target of a multi-year campaign designed to deliver a variety of malware on compromised hosts. Cybersecurity company Huntress...

Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack
2024-08-29 15:59

Cybersecurity researchers have flagged multiple in-the-wild exploit campaigns that leveraged now-patched flaws in Apple Safari and Google Chrome browsers to infect mobile users with...

Adm. Grace Hopper’s 1982 NSA Lecture Has Been Published
2024-08-29 15:58

The “long lost lecture” by Adm. Grace Hopper has been published by the NSA. (Note that there are two parts.) It’s a wonderful talk: funny, engaging, wise, prescient. Remember that talk was given...

Malware exploits 5-year-old zero-day to infect end-of-life IP cameras
2024-08-29 15:46

The Corona Mirai-based malware botnet is spreading through a 5-year-old remote code execution (RCE) zero-day in AVTECH IP cameras, which have been discontinued for years and will not receive a patch. [...]

Volt Typhoon Hackers Exploit Zero-Day Vulnerability in Versa Director Servers Used by MSPs, ISPs
2024-08-29 15:17

There are approximately 163 devices worldwide that are still exposed to attack via the CVE-2024-39717 vulnerability.