On Thursday, Apple's security response team released emergency patches to cover a pair of "actively exploited" vulnerabilities affecting macOS, iOS, and iPadOS devices. Apple confirmed the two security defects -- CVE-2022-22675 and CVE-2022-22674 -- in all its major operating systems and warned that remote code execution attacks may already be underway. Read more >>>
On Monday, the U.S. government once again cautioned of potential cyber-attacks from Russia in retaliation for economic sanctions imposed by the west on the country following its military assault on Ukraine last month. The development comes as the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) warned of "possible threats" to U.S. and international satellite communication (SATCOM) networks. Read more >>>
March 11, 2022
A new malware campaign is taking advantage of people's willingness to support Ukraine's cyber warfare against Russia to infect them with password-stealing Trojans. Last month, the Ukrainian government announced a new IT Army composed of volunteers worldwide who conduct cyberattacks and DDoS attacks against Russian entities. Read more >>>
Earlier this week, US-led sanctions on Russia for its invasion of Ukraine have sparked considerable concern about retaliatory and spillover cyberattacks from the region on US organizations and those based in other allied nations. Many expect the attacks to run the gamut from destructive campaigns involving the use of disk-wipers and ransomware to distributed-denial-of-service attacks, phishing, disinformation, misinformation, and influence campaigns. Read more >>>
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) warned US organizations that data wiping attacks targeting Ukraine could spill over to targets from other countries. The two federal agencies issued this warning in the form of a joint cybersecurity advisory published over the weekend following the unwarranted Russian invasion of Ukraine. Read more >>>
February 17, 2022
Security researchers warn that some attackers are compromising Microsoft Teams accounts to slip into chats and spread malicious executables to participants in the conversation. Researchers found that hackers started to drop malicious executable files in conversations on Microsoft Teams communication platform. The attacks started in January, the threat actor inserts in a chat an executable file called “User Centric” to trick the user into running it. Read more >>>