Hackers Tied to Russia's GRU Targeted the US Grid for Years

A Sandworm-adjacent group has successfully breached US critical infrastructure a handful of times, according to new findings from the security firm Dragos...

PT-2021-28111

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which can cause a crash. Technical details include a crash type of Heap-use-after-free WRITE 8, and th...

North Korean hackers charged with $1.3 billion of cyberheists

The US Department of Justice recently unsealed indictments detailing North Koreas involvement in several global cyberattack campaigns against institutions in the financial and entertainment sectors, and money laundering schemes in certain US states. The first unsealed indictment is for hacking...

US charges 3 North Korean hackers for extorting $1.3+ billion

By Deeba Ahmed One of the hackers was also charged in 2018 for playing a role in the Sony Pictures hacking and WannaCry ransomware attacks. This is a post from HackRead.com Read the original post: US charges 3 North Korean hackers for extorting $1.3+ billion...

PT-2021-28098

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash state includes functions such as us socket close, wrap epoll wait, and us loop run...

U.S. Indicts North Korean Hackers in Theft of $200 Million

The U.S. Justice Department today unsealed indictments against three men accused of working with the North Korean regime to carry out some of the most damaging cybercrime attacks over the past decade, including the 2014 hack of Sony Pictures, the global WannaCry ransomware contagion of 2017, and...

North Korean Malicious Cyber Activity: AppleJeus

CISA, the Federal Bureau of Investigation, and the Department of the Treasury have released a Joint Cybersecurity Advisory and seven Malware Analysis Reports MARs on the North Korean government’s dissemination of malware that facilitates the theft of cryptocurrency—referred to by the U.S...

US Cyber Command Valentine’s Day Cryptography Puzzles

The US Cyber Command has released a series of ten Valentines Day "Cryptography Challenge Puzzles." Slashdot thread. Reddit thread. And heres the archived link, in case Cyber Command takes the page down...

Chinese Supply-Chain Attack on Computer Systems

Bloomberg News has a major story about the Chinese hacking computer motherboards made by Supermicro, Levono, and others. Its been going on since at least 2008. The US government has known about it for almost as long, and has tried to keep the attack secret: Chinas exploitation of products made by...

Threat actor selling 158,000 Canadian, US credit card data

By Habiba Rashid The threat actor also claims to sell full information of credit card holders which can be a massive privacy threat to unsuspecting banking customers. This is a post from HackRead.com Read the original post: Threat actor selling 158,000 Canadian, US credit card data...

PT-2021-5244

Name of the Vulnerable Software and Affected Versions D-Link DIR-2640-US version 1.01B04 Description The issue is related to insufficiently protected credentials. The D-Link AC2600 DIR-2640 stores the device system account password in plain text and does not utilize Linux user management...

Facebook Ad Services Let Anyone Target US Military Personnel

Researchers warn that an advertising platform with categories like “Army” and “United States Air Force Security Forces” could be abused...

Breaking Down Joe Biden's $10B Cybersecurity 'Down Payment'

President Joe Biden laid out a series of cybersecurity initiatives last week at his inauguration, including earmarking $10 billion for various cybersecurity defense initiatives. Those included hiring key security personnel to support for the Cybersecurity Infrastructure Security Agency CISA. The...

Parler Finds a Reprieve in Russia—but Not a Solution

The far-right platform still hasn’t found a US-based home. Where it lands could have serious consequences for its users’ privacy...

Former DOD Head: The US Needs a New Plan to Beat China on AI

In an interview with WIRED, former secretary of defense Ash Carter discussed how to build morality into AI—and make sure other countries do too...

Security Update Guide Supports CVEs Assigned by Industry Partners

Hi Folks, This month we are introducing a new data element for each CVE in the Security Update Guide, called Assigning CNA. First let me back up a bit and give some information about the CVE program. The purpose of a CVE is to uniquely identify a cybersecurity vulnerability. The CVE program was...

Security Update Guide Supports CVEs Assigned by Industry Partners

Hi Folks, This month we are introducing a new data element for each CVE in the Security Update Guide, called Assigning CNA. First let me back up a bit and give some information about the CVE program. The purpose of a CVE is to uniquely identify a cybersecurity vulnerability. The CVE program was...

PT-2021-27504

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions dotnet parse us, dotnet parse com, and dotnet load. No informatio...

PT-2021-27582

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions: yr object set string, dotnet parse us, and dotnet...

Russian hacker jailed in US over $19M fraud, 100M users’ data theft

By Deeba Ahmed The 37-year-old hacker Andrei Tyurin was extradited to the US from Georgia in September 2018. This is a post from HackRead.com Read the original post: Russian hacker jailed in US over $19M fraud, 100M users data theft...