A ransomware task force has proposed a variety of technical, policy, and regulatory means for disrupting ransomware, including tracking Bitcoin transactions more closely and mandating ransom payment disclosures.
A threat campaign is relying on cross-site scripting attacks to deliver malware to and steal credentials from online shops.
The Ghostwriter influence campaign has expanded its targeting and TTPs, with researchers linking parts of it to the UNC1151 threat group.
The Naikon APT group attributed to China has been using a new backdoor known as Nebulae in attacks against military organizations in Asia.
The macOS vulnerability allowed attackers to bypass Apple’s core security defenses with specially-crafted application bundles.