Cybercriminals are scanning servers for the Microsoft Exchange ProxyShell RCE vulnerabilities after technical details presented at the Black Hat
Similar Posts
New Critical Vulnerabilities Found in Microsoft Exchange Server
Yesterday, the NSA alerted Microsoft of a new batch of critical vulnerabilities that threat actors could exploit to remotely compromise the Exchange Server email software program. The tech giant said that it hadn’t seen any hacks using the vulnerabilities on its customers, but the news comes at a time of great concern over bugs in…
US Spied on Top European Politicians, Danish Intelligence Helped
The US spied on top politicians in Europe, including German Chancellor Angela Merkel, from 2012 to 2014 with the help of Danish intelligence, AFP reported, quoting Danish and European media on Sunday. Danish public broadcaster Danmarks Radio (DR) said the US National Security Agency (NSA) had eavesdropped on Danish internet cables to spy on top…
Law Firm Campbell Suffers Data Breach After Ransomware Attack
Campbell Conroy & O’Neil, P.C. (Campbell), a major American law firm whose clientele includes dozens of Fortune 500 and Global 500 companies, announced suffering a data breach in the wake of a February 2021 ransomware attack. In its report on the data breach, Bleeping Computer noted that the attackers gained access to “certain individuals’ names,…
Iranian Group Used Android Backdoor
Cyberwarfare / Nation-State Attacks , Endpoint Security , Fraud Management & Cybercrime IBM: Campaign Targeted Reformists Before Election Akshaya Asokan (asokan_akshaya) • August 9, 2021 Screenshot of ITG18’s hacking activities seen from its leaked videos in July 2020. (Source: IBM X-Force) A group dubbed “ITG18,” which apparently is linked to an Iranian advanced…
Microsoft Exchange servers now targeted by Black Kingdom ransomware
Another ransomware operation known as ‘Black Kingdom’ is exploiting the Microsoft Exchange Server ProxyLogon vulnerabilities to encrypt servers. Over the weekend, security researcher Marcus Hutchins, aka MalwareTechBlog, tweeted that a threat actor was compromising Microsoft Exchange servers via the ProxyLogon vulnerabilities to deploy ransomware. Based on the logs from his honeypots, Hutchins states that the threat actor…
Russia, Iran Targeted 2020 Election
3rd Party Risk Management , Critical Infrastructure Security , Cyberwarfare / Nation-State Attacks Review Confirms Disinformation Campaigns, But No Signs Hackers Altered Vote Tallies Scott Ferguson (Ferguson_Writes) • March 16, 2021 A pair of U.S. intelligence agency reports released Tuesday conclude that Russia and Iran attempted to interfere in the 2020 presidential election…