Indictments, Attribution Unlikely to Deter Chinese Hacking

The federal government is fighting back against what it says are China-based cyberattacks against U.S. universities and companies with indictments and a “naming-and-shaming” approach — but researchers aren’t convinced the efforts will come to much in terms of deterring future activity. On Monday,...

US, EU, UK, NATO blame china for “reckless” Exchange attacks

Do you remember back when the latest urgent update was a vulnerability in Microsoft Exchange? How is that only four months ago? The trigger for the urgent advice in March was the fact that Microsoft detected multiple zero-day exploits being used to attack on-premises versions of Microsoft Exchang...

Open-xchange OX App Suite code issue vulnerability (CNVD-2022-28453)

Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A code issue vulnerability exists in Open-xchange OX App Suite, no detailed vulnerability details are...

StopRansomware.gov brings together information on stopping and surviving ransomware attacks

The US Department of Homeland Security DHS and the US Department of Justice DOJ—along with other federal partners—have launched a new website as part of the US governments fight against ransomware: StopRansomware.gov. StopRansomware.gov is said to be a one-stop hub for ransomware resources for...

A week in security (July 12 – July 18)

Last week on Malwarebytes Labs: DNS-over-HTTPS takes another small step towards global domination Nope, that isn’t Elon Musk, and he isn’t offering a free Topmist Dust watch either Four in-the-wild exploits, 13 critical patches headline bumper Patch Tuesday Is crypto’s criminal rollercoaster...

Biden’s Cybersecurity Team Gets Crowded at the Top

It’s a lot of talent, but the US now has five overlapping roles jockeying for limited budgets, authorities, and bureaucratic victories...

US offers huge reward in fight against state-sponsored cybercriminals

The US Department of State has announced that its Rewards for Justice RFJ program is now offering: …up to $10 million for information leading to the identification or location of any person who, while acting at the direction or under the control of a foreign government, participates in malicious...

Facebook Catches Iranian Spies Catfishing US Military Targets

The hackers posed as recruiters, journalists, and hospitality workers to lure their victims...

Is crypto’s criminal rollercoaster approaching a terminal dip?

It’s a turbulent time in the cryptomining realm, especially for malware authors. Some big attacks and a lot of publicity has resulted in prolific groups promising to disband, even if potentially only temporarily. Running a tighter ship The mining banhammer continues to swing as China keeps puttin...

REvil ransomware group vanishes after mounting US pressure

By Sudais Asif Currently, Hackread.com can confirm that the official website of the REvil group along with its chat and payment gateways are offline. This is a post from HackRead.com Read the original post: REvil ransomware group vanishes after mounting US pressure...

Indian call center seized over Amazon hacking scam against US citizens

By Deeba Ahmed The call center ran a fake Amazon technical support call center in South Delhi - Now, 26 of its "employees" have been arrested. This is a post from HackRead.com Read the original post: Indian call center seized over Amazon hacking scam against US citizens...

Colombia arrests suspect wanted by US over Gozi virus

By Waqas The countries targeted by the Gozi virus included Finland, Germany, United States, and the United Kingdom with victims like NASA. This is a post from HackRead.com Read the original post: Colombia arrests suspect wanted by US over Gozi virus...

Domain, server of DoubleVPN used by ransomware gangs seized

By Deeba Ahmed US, Canada, and European authorities took part in the operation which ended up seizing cybercriminals' access to and infrastructure of DoubleVPN. This is a post from HackRead.com Read the original post: Domain, server of DoubleVPN used by ransomware gangs seized...

The critical role of Zero Trust in securing our world

We are operating in the most complex cybersecurity landscape that we’ve ever seen. While our current ability to detect and respond to attacks has matured incredibly quickly in recent years, bad actors haven’t been standing still. Large-scale attacks like those pursued by Nobelium1 and Hafnium,...

Binance receives the ban hammer from UK’s FCA

Binance, the worlds largest and most popular cryptocurrency exchange network, has had a rough few days. First, Japans financial regulator, the Financial Services Agency FSA, issued its second warning to Binance on Friday, 25 June, for operating in the country without permission The first warning...

Attackers Breach Microsoft Customer Service Accounts

The same group behind the SolarWinds supply-chain attacks has been targeting Microsoft’s corporate networks to gain access to specific organizations — primarily, U.S.-based IT and government organizations. Microsoft officially announced the attacks after Reuters obtained an email sent to customer...

US Takedown of Iranian Media Sites Extends a Thorny Precedent

Free speech advocates raised concerns after the Justice Department seized more than 30 domains this week...

US seizes official website of Iranian state-owned Press TV

By Waqas With Press TV; there are at least 6 regional websites that are currently displaying notices of seizure apparently uploaded by the US authorities. This is a post from HackRead.com Read the original post: US seizes official website of Iranian state-owned Press TV...

D-Link DIR-2640-US Account Password Plaintext Storage Vulnerability

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to easily log in to the target router via a serial port and gain root privileges...

D-Link DIR-2640-US Incorrect Access Control Vulnerability

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to use telnet login, modify routing information, monitor the traffic of all devices under the router, hijack DNS, and phishing attacks...