Microsoft Exchange ProxyShell exploits used to deploy Babuk ransomware
A new threat actor is hacking Microsoft Exchange servers and breaching corporate networks using the ProxyShell vulnerability to deploy the Babuk…
Ukraine links members of Gamaredon hacker group to Russian FSB
SSU and the Ukrainian secret service say they have identified five members of the Gamaredon hacking group, a Russian state-sponsored…
Alleged Twitter hacker charged with theft of $784K in crypto via SIM swaps
The US Department of Justice has indicted a suspected Twitter hacker known as 'PlugWalkJoe' for also stealing $784,000 worth of cryptocurrency…
BlackMatter ransomware moves victims to LockBit after shutdown
With the BlackMatter ransomware operation shutting down, existing affiliates are moving their victims to the competing LockBit ransomware site for…
US sanctions NSO Group and three others for spyware and exploit sales
The U.S. has sanctioned four companies located in Israel, Russia, and Singapore for the development of spyware or the sale…
Sonos, HP, and Canon devices hacked at Pwn2Own Austin 2021
During the first day of Pwn2Own Austin 2021, contestants won $362,500 after exploiting previously unknown security flaws to hack printers, routers,…
FBI: Ransomware targets companies during mergers and acquisitions
The Federal Bureau of Investigation (FBI) warns that ransomware gangs are targeting companies involved in "time-sensitive financial events" such as corporate mergers…
BlackShadow hackers breach Israeli hosting firm and extort customers
The BlackShadow hacking group attacked the Israeli hosting provider Cyberserve to steal client databases and disrupt the company's services. [...]
Microsoft warns of rise in password sprays targeting cloud accounts
The Microsoft Detection and Response Team (DART) says it detected an increase in password spray attacks targeting privileged cloud accounts…
The Week in Ransomware – October 29th 2021 – Making arrests
This week, international law enforcement operations went on the offensive, making arrests in numerous countries for ransomware-related activities. [...]