Author: | Decipher

Ransomware Group Targeted Dragos in Unsuccessful Extortion Attempt

A known ransomware group was able to access limited information resources, which it then attempted to use in an unsuccessful extortion attempt against the company.

Critical Infrastructure Security, Critical Infrastructure, Operational Technology

FBI Disrupts Turla Espionage Malware Network

While Operation Medusa disrupts long standing espionage efforts by Turla, security researchers say that its effects will only be temporary.

Malware

GitHub Enables Push Protection to Prevent Secret Leaks

GitHub has released a new push protection feature to prevent developers from accidentally including secrets in commits.

Github

Intel BootGuard, Firmware Signing Keys Found in MSI Data Leak

Researchers have discovered the firmware signing keys and Intel BootGuard keys for several manufacturers in data dumped by attackers who breached Taiwanese hardware maker MSI.

Data Breach

Microsoft Fixes Windows Bug, Secure Boot Bypass Under Active Attack

Microsoft has patched two flaws (CVE-2023-29336 and CVE-2023-24932) that have been actively exploited.

Microsoft, UEFI