Security News

US names Chinese national it alleges was behind 2020 attack on Sophos firewalls
2024-12-11 05:02

Also sanctions his employer – an outfit called Sichuan Silence linked to Ragnarok ransomware The US Departments of Treasury and Justice have named a Chinese business and one of its employees as...

US sanctions Chinese cybersecurity company for firewall compromise, ransomware attacks
2024-12-10 20:34

The Department of the Treasury is sanctioning Chinese cybersecurity company Sichuan Silence, and one of its employees, Guan Tianfeng, for their roles in the April 2020 compromise of tens of...

US sanctions Chinese firm for hacking firewalls in ransomware attacks
2024-12-10 16:37

The U.S. Treasury Department has sanctioned Chinese cybersecurity company Sichuan Silence and one of its employees for their involvement in a series of Ragnarok ransomware attacks targeting U.S....

New Cleo zero-day RCE flaw exploited in data theft attacks
2024-12-10 15:09

Hackers are actively exploiting a zero-day vulnerability in Cleo managed file transfer software to breach corporate networks and conduct data theft attacks. [...]

Inside the incident: Uncovering an advanced phishing attack
2024-12-10 15:01

Recently, Varonis investigated a phishing campaign in which a malicious email enabled a threat actor to access the organization. This blog post will reveal the tactics used to avoid detection and...

Fully patched Cleo products under renewed 'zero-day-ish' mass attack
2024-12-10 13:32

Thousands of servers targeted while customers wait for patches Researchers at security shop Huntress are seeing mass exploitation of a vulnerability affecting three Cleo file management products,...

CERT-UA Warns of Phishing Attacks Targeting Ukraine’s Defense and Security Force
2024-12-10 09:12

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new set of cyber attacks that it said were aimed at defense companies in the country as well as its security and defense...

Ransomware attack hits leading heart surgery device maker
2024-12-09 23:00

​Artivion, a leading manufacturer of heart surgery medical devices, has disclosed a November 21 ransomware attack that disrupted some of its operations and forced it to take some systems offline. [...]

Update your OpenWrt router! Security issue made supply chain attack possible
2024-12-09 18:34

A security issue that could have allowed attackers to serve malicious firmware images to users has been fixed by OpenWrt Project, the organization that helms the development of the popular Linux...

Romanian energy supplier Electrica hit by ransomware attack
2024-12-09 16:38

Electrica Group, a key player in the Romanian electricity distribution and supply market, is investigating a ransomware attack that was still "in progress" earlier today. [...]