A major credential leak in May has prompted the US Cybersecurity and Infrastructure Security Agency (CISA) to take decisive action to strengthen its security posture. The agency’s swift response to the incident, which included revoking access to sensitive materials and analyzing log files to assess the scope of the breach, has been hailed as a … Read more
A key player in a wave of devastating Ryuk ransomware attacks has been brought to justice, with an Armenian national pleading guilty to computer fraud and conspiracy. Karen Serobovich Vardanyan’s guilty plea marks a significant development in the ongoing effort to hold accountable those responsible for unleashing chaos on businesses and organizations worldwide. Between November … Read more
A Global Campaign of Cyber Attacks Targets Vulnerable Websites Worldwide, with Australian Businesses Hit Hardest The Australian Cyber Security Centre (ACSC) has sounded the alarm about a massive global campaign aimed at exploiting weaknesses in content management systems (CMS) and plugins. This coordinated attack is not only targeting businesses in Australia but also spreading its … Read more
A recent tool has been released to help students and cybersecurity professionals alike better understand how a program’s memory stack works, a critical component of malware analysis. The “stack simulator” created by Xavier Mertens is an interactive assembly editor that visualizes the impact on the stack and registers when code is executed. The stack is … Read more
A Critical Patch for Wireshark Released, Securing Millions of Users Worldwide Wireshark, a widely-used network protocol analyzer, has just received an urgent update to fix 12 critical vulnerabilities and 16 bugs in its latest release, version 4.6.7. This is not just a routine patch – it’s a critical security update that affects millions of users … Read more
**CISA Takes Action After Major Credential Leak** The Cybersecurity and Infrastructure Security Agency (CISA) has taken significant steps to strengthen its defenses and improve incident response after a major credential leak in May. The agency’s sensitive materials were exposed when a contractor leaked privileged Amazon AWS GovCloud Keys on a public GitHub repository, prompting CISA … Read more
A Notorious Ransomware Player Bites the Dust: Armenian National Pleads Guilty in Ryuk Attacks Karen Serobovich Vardanyan, a 34-year-old Armenian national, has pleaded guilty to participating in a series of high-profile ransomware attacks involving the notorious Ryuk malware. Between November 2019 and April 2020, Vardanyan and his co-conspirators deployed Ryuk against three US-based organizations, extorting … Read more
A Global Campaign of Cyber Attacks Targeting Vulnerable CMS Platforms Has Been Unleashed, Warns Australia’s Cyber Security Centre Australian businesses are being warned about a massive global campaign targeting vulnerable content management systems (CMS) and plugins. The Australian Cyber Security Centre (ACSC) has issued an alert stating that many small to medium-sized enterprises in the … Read more
A New Attack Vector Emerges: ‘HalluSquatting’ Turns AI Hallucinations into Botnet Delivery Mechanism Researchers have uncovered a novel attack technique that exploits the tendency of artificial intelligence (AI) assistants to “hallucinate” or generate false information. Dubbed “HalluSquatting,” this method leverages the ability of AI tools to create fake resources and packages, allowing attackers to create … Read more
A Sophisticated Threat Actor’s Tool of Choice: GigaWiper Microsoft has been tracking a highly destructive malware, dubbed GigaWiper, that has been wreaking havoc on Windows systems for over eight months. This sophisticated threat combines multiple malware families and boasts robust command-and-control (C&C) capabilities, making it a powerful tool in the hands of a skilled threat … Read more