Telegram Zero-Day Enabled Malware Delivery

The EvilVideo zero-day vulnerability in Telegram for Android allowed threat actors to send malicious files disguised as videos.

The post Telegram Zero-Day Enabled Malware Delivery appeared first on SecurityWeek.

SecurityWeek – ​Read More

What to Know About the Kids Online Safety Act and Its Chances of Passing

Everything about the Kids Online Safety Act (KOSA): who supports it, who opposes it, and its chances of passing in Congress.

The post What to Know About the Kids Online Safety Act and Its Chances of Passing appeared first on SecurityWeek.

SecurityWeek – ​Read More

CrowdStrike Speeding Up Remediation of Systems Hit by BSOD

CrowdStrike on Monday informed customers that it has tested a new technique to speed up the remediation of systems impacted by the recent bad update, and the company claims many systems have already been restored. Roughly 8.5 million Windows devices started displaying a Blue Screen of Death (BSOD) late last week after receiving a faulty […]

The post CrowdStrike Speeding Up Remediation of Systems Hit by BSOD appeared first on SecurityWeek.

SecurityWeek – ​Read More

Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android

ESET researchers discovered a zero-day exploit targeting Telegram for Android, called EvilVideo. This exploit allowed attackers to send malicious Android payloads disguised as video files in unpatched versions of Telegram.

Cyware News – Latest Cyber News – ​Read More

Ransomware Takedowns Leave Criminals Scrambling for Stability

A recent report from Europol indicates that the disruption of ransomware-as-a-service (RaaS) groups is causing a fragmentation of the threat landscape, complicating tracking efforts.

Cyware News – Latest Cyber News – ​Read More

UK: NCA Infiltrates DDoS-for-Hire Site as Suspected Controller Arrested in Northern Ireland

The National Crime Agency (NCA) in the United Kingdom has successfully infiltrated a DDoS-for-hire service known as DigitalStress. The suspected controller of the site was arrested in Northern Ireland earlier this month.

Cyware News – Latest Cyber News – ​Read More

Law Enforcement Disrupts DDoS-for-Hire Service DigitalStress

Authorities in the UK infiltrated and disrupted the DDoS-for-hire service DigitalStress, and one suspect was arrested.

The post Law Enforcement Disrupts DDoS-for-Hire Service DigitalStress appeared first on SecurityWeek.

SecurityWeek – ​Read More

Novel ICS Malware Sabotaged Water-Heating Services in Ukraine

Newly discovered “FrostyGoop” is the first ICS malware that can communicate directly with operational technology systems via the Modbus protocol.

darkreading – ​Read More

How Russia-Linked Malware Cut Heat to 600 Ukrainian Buildings in Deep Winter

The code, the first of its kind, was used to sabotage a heating utility in Lviv at the coldest point in the year—what appears to be yet another innovation in Russia’s torment of Ukrainian civilians.

Security Latest – ​Read More

FrostyGoop ICS Malware Left Ukrainian City’s Residents Without Heating

The FrostyGoop ICS malware was used recently in an attack against a Ukrainian energy firm that resulted in loss of heating for many buildings.

The post FrostyGoop ICS Malware Left Ukrainian City’s Residents Without Heating appeared first on SecurityWeek.

SecurityWeek – ​Read More