1313 matches found
'Where Law Ends' Review: How the Mueller Investigation Fell Flat
Prosecutor Andrew Weissmann's Where Law Ends doesn't fill the hole at the center of the Trump-Russia probe, but does help explain why it's there...
Windows XP Source Code Got Leaked All Over the Internet
Plus: A cruel phishing test, ransomware hits Russia, and more of the week's top security news...
warnermusic.ru Cross Site Scripting vulnerability OBB-1355525
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
APT28 Mounts Rapid, Large-Scale Theft of Office 365 Logins
The Russia-linked threat group known as APT28 has changed up its tactics to include Office 365 password-cracking and credential-harvesting. Microsoft researchers have tied APT28 a.k.a. Strontium, Sofacy or Fancy Bear to this newly uncovered pattern of O365 activity, which began in April and is...
Microsoft Warns of Cyberattacks on Trump, Biden Election Campaigns
The U.S. election campaigns of both Donald Trump and Joe Biden have been targeted in a slew of recent cyberattacks, Microsoft said on Thursday. With the U.S. presidential election a mere two months away, in recent weeks cyberattacks targeting people and organizations involved in it have ramped up...
Russia’s Fancy Bear Hackers Are Hitting US Campaign Targets Again
Microsoft says the GRU hacking group has attacked hundreds of organizations over the past year, many of them tied to the upcoming election...
A DHS Official Says He Was Punished for Not Pushing Trump's Agenda
Brian Murphy says he was pressured to alter reports on Russia and white supremacy—and that he was fired for refusing to budge...
warnermusic.ru Cross Site Scripting vulnerability OBB-1296449
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
energo-russia.ru Cross Site Scripting vulnerability OBB-1258600
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Black Hat 2020: Influence Campaigns Are a Cybersecurity Problem
Social media used as a cudgel for nation-states to sway opinion is a cybersecurity threat CISOs can’t ignore — and need to understand better and mitigate against. That’s the message from Renée DiResta, research manager at the Stanford Internet Observatory, who said she is seeing a steady growth a...
EU sanctions hackers from China, Russia, North Korea who're wanted by the FBI
The Council of the European Union has imposed its first-ever sanctions against persons or entities involved in various cyber-attacks targeting European citizens, and its member states. The directive has been issued against six individuals and three entities responsible for or involved in various...
Russia Tested a Space Weapon Last Week
Twitter hack details, a botnet vigilante, and more of the week's top security news...
TAU Threat Discovery: Cryptocurrency Clipper Malware Evolves
Clipper malware is designed to steal cryptocurrency from victims by replacing wallet addresses in the victim’s clipboard with wallet addresses that belong to the attacker. This stealthy technique is designed to silently trick the victim when making what appears to be a legitimate cryptocurrency...
Russia's GRU Hackers Hit US Government and Energy Targets
A previously unreported Fancy Bear campaign persisted for well over a year—and indicates that the notorious group has broadened its focus...
This Week in Security News: Trend Micro Research Discovers Cybercriminal Turf War on Routers and a Massive Twitter Breach Compromises Some of the World’s Most Prominent Accounts
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about Trend Micro’s report on the botnet battle for IoT territory and how attacker groups are trying to gain control of vulnerable...
Russia’s Latest Hacking Target: Covid-19 Vaccine Projects
Officials in three countries believe a state-linked group is trying to steal intellectual property and information about potential vaccine candidates...
Business Email Compromise (BEC) Criminal Ring
A criminal group called Cosmic Lynx seems to be based in Russia: Dubbed Cosmic Lynx, the group has carried out more than 200 BEC campaigns since July 2019, according to researchers from the email security firm Agari, particularly targeting senior executives at large organizations and corporations...
The Worst Hacks and Breaches of 2020 So Far
Iran, China, Russia—the gang was all here in the first half of this year. Oh, and also an unprecedented pandemic that’s been a boon for hackers...
InvisiMole Group Resurfaces Touting Fresh Toolset, Gamaredon Partnership
The InvisiMole threat group has resurfaced in a new campaign, revealing a new toolset and a strategic collaboration with the high-profile Gamaredon advanced persistent threat APT group. InvisiMole was first uncovered by ESET in 2018, with cyberespionage activity dating back to 2013 in operations ...
InvisiMole Hackers Target High-Profile Military and Diplomatic Entities
Cybersecurity researchers today uncovered the modus operandi of an elusive threat group that hacks into the high-profile military and diplomatic entities in Eastern Europe for espionage. The findings are part of a collaborative analysis by cybersecurity firm ESET and the impacted firms, resulting...