Security News
![Researchers link 3AM ransomware to Conti, Royal cybercrime gangs](/static/build/img/news/researchers-link-3am-ransomware-to-conti-royal-cybercrime-gangs-small.jpg)
Security researchers analyzing the activity of the recently emerged 3AM ransomware operation uncovered close connections with infamous groups, such as the Conti syndicate and the Royal ransomware gang. The 3AM ransomware gang's activity was first documented publicly in mid-September when the Threat Hunter Team at Symantec, now part of Broadcom, revealed that they noticed threat actors switching to ThreeAM ransomware after failing to deploy the LockBit malware.
![Meta won't remove fake Instagram profiles that are clearly catfishing](/static/build/img/news/meta-won-t-remove-fake-instagram-profiles-that-are-clearly-catfishing-small.jpg)
The problem seems to have gotten much worse on Instagram over the past year with its parent company Meta falling short of effectively tackling fake profiles even when there are sufficient signs to indicate that a profile is misusing someone else's photos and identity. In our investigation, BleepingComputer observed instances where reporting fake profiles that impersonated an internet personality or a public figure concluded in such reports being dismissed after being processed, at least in part, through what appeared to be an automated decision-making system.
![Meta won't remove fake Instagram profiles used for obvious catfishing](/static/build/img/news/meta-won-t-remove-fake-instagram-profiles-used-for-obvious-catfishing-small.jpg)
The problem seems to have gotten much worse on Instagram over the past year with its parent company Meta falling short of effectively tackling fake profiles even when there are sufficient signs to indicate that a profile is misusing someone else's photos and identity. In our investigation, BleepingComputer observed instances where reporting fake profiles that impersonated an internet personality or a public figure concluded in such reports being dismissed after being processed, at least in part, through what appeared to be an automated decision-making system.
![Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years](/static/build/img/news/chinese-hackers-silently-weaponized-vmware-zero-day-flaw-for-2-years-small.jpg)
An advanced China-nexus cyber espionage group previously linked to the exploitation of security flaws in VMware and Fortinet appliances has been linked to the abuse of a critical vulnerability in...
![CISA Issues Emergency Directive to Federal Agencies on Ivanti Zero-Day Exploits](/static/build/img/news/cisa-issues-emergency-directive-to-federal-agencies-on-ivanti-zero-day-exploits-small.jpg)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday issued an emergency directive urging Federal Civilian Executive Branch (FCEB) agencies to implement mitigations against...
![Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack](/static/build/img/news/microsoft-s-top-execs-emails-breached-in-sophisticated-russia-linked-apt-attack-small.jpg)
Microsoft on Friday revealed that it was the target of a nation-state attack on its corporate systems that resulted in the theft of emails and attachments from senior executives and other...
![Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware](/static/build/img/news/invoice-phishing-alert-ta866-deploys-wasabiseed-screenshotter-malware-small.jpg)
The threat actor tracked as TA866 has resurfaced after a nine-month hiatus with a new large-volume phishing campaign to deliver known malware families such as WasabiSeed and Screenshotter. The...
![Russians invade Microsoft exec mail while China jabs at VMware vCenter Server](/static/build/img/news/russians-invade-microsoft-exec-mail-while-china-jabs-at-vmware-vcenter-server-small.jpg)
A VMware security vulnerability has been exploited by Chinese cyberspies since late 2021, according to Mandiant, in what has been a busy week for nation-state espionage news. On Friday VMware confirmed CVE-2023-34048, a critical out-of-bounds write flaw in vCenter Server, was under active exploitation.
![Russian hackers stole Microsoft corporate emails in month-long breach](/static/build/img/news/russian-hackers-stole-microsoft-corporate-emails-in-month-long-breach-small.jpg)
Microsoft disclosed Friday night that some of its corporate email accounts were breached and data stolen by the Russian state-sponsored hacking group Midnight Blizzard.Nobelium is a Russian state-sponsored actor believed to be behind the 2020 SolarWinds supply chain attack, which also impacted Microsoft.
![BreachForums hacking forum admin sentenced to 20 years supervised release](/static/build/img/news/breachforums-hacking-forum-admin-sentenced-to-20-years-supervised-release-small.jpg)
Conor Brian Fitzpatrick was sentenced to 20 years of supervised release today in the Eastern District of Virginia for operating the notorious BreachForums hacking forum, known for the sale and leaking of personal data for hundreds of millions of people worldwide. To facilitate the sale and sharing of stolen data, Fitzpatrick created an online forum called BreachForums, where the data for millions of individuals worldwide was commonly leaked or sold to other threat actors.