Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine

A new sophisticated cyber attack has been observed targeting endpoints geolocated to Ukraine with an aim to deploy Cobalt Strike and seize control of the compromised hosts.
The attack chain, per Fortinet FortiGuard Labs, involves a Microsoft Excel file that carries an embedded VBA macro to initiate the infection,
“The attacker uses a multi-stage malware strategy to deliver the notorious ‘Cobalt

The Hacker News – ​Read More

6 Best VPNs for the UK in 2024

VPN capabilities and performance levels differ from place to place. Which VPNs are best for U.K. users and expats?

Security | TechRepublic – ​Read More

Ransomware Group Claims Cyberattack on Frontier Communications

The RansomHub ransomware group claims to have stolen the information of over 2 million Frontier Communications customers.

The post Ransomware Group Claims Cyberattack on Frontier Communications appeared first on SecurityWeek.

SecurityWeek – ​Read More

Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

Cloud computing and analytics company Snowflake said a “limited number” of its customers have been singled out as part of a targeted campaign.
“We have not identified evidence suggesting this activity was caused by a vulnerability, misconfiguration, or breach of Snowflake’s platform,” the company said in a joint statement along with CrowdStrike and Google-owned Mandiant.
“We have not identified

The Hacker News – ​Read More

AI Is Your Coworker Now. Can You Trust It?

Generative AI tools such as OpenAI’s ChatGPT and Microsoft’s Copilot are becoming part of everyday business life. But they come with privacy and security considerations you should know about.

Security Latest – ​Read More

Inside the Biggest FBI Sting Operation in History

When a drug kingpin named Microsoft tried to seize control of an encrypted phone company for criminals, he was playing right into its real owners’ hands.

Security Latest – ​Read More

Cybersecurity M&A Roundup: 28 Deals Announced in May 2024

Roundup of the more than two dozen cybersecurity-related merger and acquisition (M&A) deals announced in May 2024.

The post Cybersecurity M&A Roundup: 28 Deals Announced in May 2024 appeared first on SecurityWeek.

SecurityWeek – ​Read More

Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking

Cox recently patched a series of vulnerabilities that could have allowed hackers to remotely take control of millions of modems.

The post Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking appeared first on SecurityWeek.

SecurityWeek – ​Read More

Russians Love YouTube. That’s a Problem for the Kremlin

YouTube remains the only major US-based social media platform available in Russia. It’s become “indispensable” to everyday people, making a ban tricky. Journalists and dissidents are taking advantage.

Security Latest – ​Read More

37 Vulnerabilities Patched in Android

Android’s June 2024 security update resolves 37 vulnerabilities, including high-severity flaws in Framework and System.

The post 37 Vulnerabilities Patched in Android appeared first on SecurityWeek.

SecurityWeek – ​Read More