REvil Ransomware Affiliate Sentenced to Over 13 Years in Prison

Yaroslav Vasinskyi, a 24-year-old Ukrainian national and affiliate of the notorious REvil ransomware-as-a-service (RaaS) group, has been sentenced to 13 years and 7 months in prison by a US court.

Cyware News – Latest Cyber News – ​Read More

ArcaneDoor Espionage Campaign Targeting Cisco Firewalls Linked to China

An analysis of IoCs suggests that a Chinese threat group may be behind the recent ArcaneDoor espionage campaign targeting Cisco firewalls.

The post ArcaneDoor Espionage Campaign Targeting Cisco Firewalls Linked to China appeared first on SecurityWeek.

SecurityWeek – ​Read More

Investigation Uncovers Substantial Spyware Exports to Indonesia

An investigation by Amnesty International’s Security Lab revealed that Indonesia has been procuring powerful and invasive commercial spyware and surveillance products from international vendors, brokers, and resellers.

Cyware News – Latest Cyber News – ​Read More

Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals

A botnet dismantled in January and used by Russia-linked APT28 consisted of more than just Ubiquiti Edge OS routers.

The post Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals appeared first on SecurityWeek.

SecurityWeek – ​Read More

AI-Driven Phishing Attacks Deceive Even the Most Aware Users

By automating and personalizing various aspects of the attack process, such as crafting convincing emails and creating realistic phishing pages, threat actors can deceive even the most aware users.

Cyware News – Latest Cyber News – ​Read More

CISA, FBI Urge Organizations to Eliminate Path Traversal Vulnerabilities

CISA and the FBI warn of threat actors abusing path traversal software vulnerabilities in attacks targeting critical infrastructure.

The post CISA, FBI Urge Organizations to Eliminate Path Traversal Vulnerabilities appeared first on SecurityWeek.

SecurityWeek – ​Read More

Horizon3.ai Introduces AI-Assisted Service to Prioritize and Patch Vulnerabilities Faster

SaaS-based, AI-assisted penetration service allows proactive defensive action against exploitation of new vulnerabilities.

The post Horizon3.ai Introduces AI-Assisted Service to Prioritize and Patch Vulnerabilities Faster appeared first on SecurityWeek.

SecurityWeek – ​Read More

US Charges 16 Over ‘Depraved’ Grandparent Scams

The scam involved call center workers impersonating the victims’ relatives, claiming they were in legal trouble or had been in an accident, and convincing the victims to send thousands of dollars to help them.

Cyware News – Latest Cyber News – ​Read More

Cybercriminals and Nation-State Actors Found Sharing Compromised Networks

Nation-state threat actors like Sandworm used their own dedicated proxy botnets, while APT group Pawn Storm had access to a criminal proxy botnet of Ubiquiti EdgeRouters.

Cyware News – Latest Cyber News – ​Read More

New Guide Explains How to Eliminate the Risk of Shadow SaaS and Protect Corporate Data

SaaS applications are dominating the corporate landscape. Their increased use enables organizations to push the boundaries of technology and business. At the same time, these applications also pose a new security risk that security leaders need to address, since the existing security stack does not enable complete control or comprehensive monitoring of their usage.

The Hacker News – ​Read More