Australian Cyber Security Centre warns of a surge of LockBit 2.0 ransomware attacks

SAP partners with Onapsis to mitigate active threats against unprotected SAP applications – IT Security News 8. April 2021 SAP and Onapsis jointly released a cyber threat intelligence report providing actionable information on how malicious threat actors are targeting and potentially exploiting unprotected mission-critical SAP applications. The companies have worked in close partnership with the…

Microsoft and Citizen Lab have linked Israeli spyware company Candiru (also tracked as Sourgum) to new Windows spyware dubbed DevilsTongue deployed using now patched Windows zero-day vulnerabilities. “Candiru is a secretive Israel-based company that sells spyware exclusively to governments,” Citizen Lab explained in a report published today. “Reportedly, their spyware can infect and monitor iPhones,…

Loading Once officials identified the address, or “wallet”, that DarkSide had used to collect the payment, it sought permission from a judge in the Northern District of California to seize the funds from the wallet, the New York Times reported. The filing said the “cryptocurrency address” was located in the Northern District of California. The…

Russia and China have heaped pressure on Joe Biden with provocative military drills in the Pacific and the South China Sea ahead of the US President’s showdown with Vladimir Putin in Geneva today.  USAF stealth fighters were scrambled to Hawaii on Sunday as Moscow launched its biggest naval exercises in the Pacific since the Cold…

Application Security , Critical Infrastructure Security , Cybercrime Security Agency Will Use Bugcrowd, EnDyna for Platform Scott Ferguson (Ferguson_Writes) • June 8, 2021     The U.S. Cybersecurity and Infrastructure Security Agency is preparing to expand its vulnerability research and disclosure program, which is now mandatory for nearly all executive branch agencies within the federal…

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Governance & Risk Management ESET Report Ties ‘Vyveva’ Backdoor to North Korean APT Group Akshaya Asokan (asokan_akshaya) • April 9, 2021     Example of how the “Vyveva” backdoor works (Source: ESET) The Lazarus Group, a North Korean-linked advanced persistent threat group also known as…