Security news that informs and inspires

All Articles

2235 articles:

Cheerscrypt Linux-Based Ransomware Targets VMware ESXi Servers

The new Linux-based ransomware is only the latest to target VMware ESXi servers.

Linux

Exploits Target Zero Day in Windows and Office

A zero day flaw (CVE-2022-30190) in Windows and Office is under active attack and MIcrosoft has not issued a patch yet.

Microsoft

Interpol Arrests Alleged Head of BEC Cybercrime Syndicate

Interpol and private-sector companies announced the arrest of the alleged leader of a well-known phishing and BEC group.

BEC

Ransomware Safe Havens, Reporting Inconsistencies Trouble Authorities

Despite the U.S. government adopting many recommendations by the Ransomware Task Force in combating ransomware, authorities still grapple with several challenges that enable the ransomware ecosystem to thrive.

Ransomware, Ransomware Task Force

Cisco Patches Serious Flaw in IOS

Cisco has patched a flaw in IOS XR that can allow an attacker to write arbitrary files to the Redis instance.

Vulnerability

Decipher Podcast: Source Code 5/20

Welcome back to Source Code, Decipher’s weekly news wrap podcast.

Source Code

DoJ Will Not Prosecute Good-Faith Hackers Under CFAA

The Department of Justice's new policy changes further narrow the scope of the Computer Fraud and Abuse Act, which has long been criticized for being too vague.

CFAA

QNAP Warns of Deadbolt Ransomware Targeting NAS Devices

QNAP is urging customers to remove NAS devices from the Internet amid a new wave of Deadbolt ransomware intrusions.

Ransomware

CISA: Federal Agencies Must Fix VMware Bugs Within Five Days

CISA is mandating federal agencies to apply updates that fix several serious VMware bugs.

Vmware, Cisa

Biden’s Cyber EO Ushered in Era of ‘Renewed Focus,’ But Challenges Remain

Government officials cited progress a year after Biden's executive order, but stressed that "there's more work to do."

MFA, Zero Trust

NVIDIA Fixes Serious Flaws in GPU Driver

NVIDIA has released an update to fix a number of serious code-execution flaws in its GPU display driver that could be used to perform guest-to-host escapes.

Vulnerability

DoJ: Venezuelan Doctor Behind Thanos Ransomware Builder

A 55-year-old Venezuelan cardiologist is allegedly behind the Jigsaw v.2 ransomware and the Thanos builder.

Ransomware

Exploitation Attempts Start for Zyxel RCE Bug

A recently patched Zyxel firewall bug can allow bad actors to launch remote code execution attacks.

Rce

Researchers Demo Relay Attack Against Bluetooth LE Systems

NCC Group researchers have shown a novel relay attack against Bluetooth Low Energy proximity authentication systems.

Bluetooth Security

Trio of Serious Bugs Fixed in SonicWall SSL VPNs

Three serious flaws, including an authentication bypass, a shared hard-coded encryption key, and an open redirect, have been patched in the SonicWall SMA 1000 SSL VPNs.

Vulnerabilities, Sonicwall