Security News
![Google TAG: Kremlin cyber spies move into malware with a custom backdoor](/static/build/img/news/google-tag-kremlin-cyber-spies-move-into-malware-with-a-custom-backdoor-small.jpg)
Russian cyberspies linked to the Kremlin's Federal Security Service are moving beyond their usual credential phishing antics and have developed a custom backdoor that they started delivering via email as far back as November 2022, according to Google's Threat Analysis Group. "TAG has observed SPICA being used as early as September 2023, but believe that COLDRIVER's use of the backdoor goes back to at least November 2022," the Chocolate Factory's threat hunting team said in an analysis published today.
![Google: Russian FSB hackers deploy new Spica backdoor malware](/static/build/img/news/google-russian-fsb-hackers-deploy-new-spica-backdoor-malware-small.jpg)
Google says the ColdRiver Russian-backed hacking group is pushing previously unknown backdoor malware using payloads masquerading as a PDF decryption tool. "COLDRIVER presents these documents as a new op-ed or other type of article that the impersonation account is looking to publish, asking for feedback from the target. When the user opens the benign PDF, the text appears encrypted," Google TAG said.
![TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning Attacks](/static/build/img/news/tensorflow-ci-cd-flaw-exposed-supply-chain-to-poisoning-attacks-small.jpg)
Continuous integration and continuous delivery (CI/CD) misconfigurations discovered in the open-source TensorFlow machine learning framework could have been exploited to orchestrate supply chain...
![Canadian Citizen Gets Phone Back from Police](/static/build/img/news/alt/web-statistics-2-small.jpg)
After 175 million failed password guesses, a judge rules that the Canadian police must return a suspect's phone. Judge] Carter said the investigation can continue without the phones, and he noted that Ottawa police have made a formal request to obtain more data from Google.
![MFA Spamming and Fatigue: When Security Measures Go Wrong](/static/build/img/news/mfa-spamming-and-fatigue-when-security-measures-go-wrong-small.jpg)
In today's digital landscape, traditional password-only authentication systems have proven to be vulnerable to a wide range of cyberattacks. To safeguard critical business resources, organizations...
![Docker hosts hacked in ongoing website traffic theft scheme](/static/build/img/news/docker-hosts-hacked-in-ongoing-website-traffic-theft-scheme-small.jpg)
A new campaign targeting vulnerable Docker services deploys an XMRig miner and the 9hits viewer app on compromised hosts, allowing a dual monetization strategy. 9hits is a web traffic exchange platform where members can drive traffic to each others' sites.
![Vast botnet hijacks smart TVs for prime-time cybercrime](/static/build/img/news/vast-botnet-hijacks-smart-tvs-for-prime-time-cybercrime-small.jpg)
Security researchers have pinned a DDoS botnet that's infected potentially millions of smart TVs and set-top boxes to an eight-year-old cybercrime syndicate called Bigpanzi. "The potential for Bigpanzi-controlled TVs and STBs to broadcast violent, terroristic, or pornographic content, or to employ increasingly convincing AI-generated videos for political propaganda, poses a significant threat to social order and stability," said researchers at Chinese security biz Qianxin.
![VMware: Plug critical Aria Automation hole immediately! (CVE-2023-34063)](/static/build/img/news/vmware-plug-critical-aria-automation-hole-immediately-cve-2023-34063-small.jpg)
A critical vulnerability affecting VMware Aria Automation and VMware Cloud Foundation can be exploited by attackers to gain access to remote organizations and workflows, VMware has warned.Patches are available and VMware recommends upgrading to VMware Aria Automation 8.16.
![Jira down: Atlassian outage affecting multiple cloud services](/static/build/img/news/jira-down-atlassian-outage-affecting-multiple-cloud-services-small.jpg)
Multiple Atlassian Jira products are experiencing an ongoing outage as of this morning. BleepingComputer can confirm that Jira services are experiencing connection issues since this morning, at least as of 3:45 AM Eastern time.
![Enter the era of platform-based cloud security](/static/build/img/news/enter-the-era-of-platform-based-cloud-security-small.jpg)
"These types of solutions offer an integrated platform approach to cloud security that allows security teams to save time and gain visibility, leading to operational efficiencies, tool consolidation, and streamlined compliance," it concludes. The report highlights how Trend Vision One delivers an integrated platform that meets the needs of both cloud and security teams, with functionality including cloud-native application protection platform capabilities, that provide comprehensive, automated and connected protection across cloud environments.