A significant cybersecurity breach at JumpCloud is attributed to a hacking unit affiliated with North Korea’s Reconnaissance General Bureau (RGB). The group, UNC4899, has a history of targeting cryptocurrency companies and stealing passwords from executives and security teams to fund…
Privilege escalation attacks are a severe concern to organizations, as they can lead to unauthorized access and control over sensitive systems. Mandiant’s red team recently discovered zero-day vulnerabilities in the Windows Installers of Atera remote monitoring and management software. These…
Recent reports have revealed that North Korean state-sponsored hackers, known for their cybercriminal activities and involvement in cryptocurrency heists, were behind a breach of the software business JumpCloud. The attack was part of an attempted supply-chain intrusion aimed at cryptocurrency…
The Ukrainian defense forces are facing a new cyber threat from the notorious Russian hacking group Turla, also known as Waterbug, Venomous Bear, and Secret Blizzard. Recent research conducted by Ukraine’s Computer Emergency Response Team (CERT-UA) and Microsoft’s Threat Intelligence…
Chinese cyber espionage activities have evolved significantly in recent years, with threat actors employing advanced techniques to avoid detection and complicate attribution. Mandiant has recently disclosed these evolving tactics, focusing on exploiting zero-day vulnerabilities in security, networking, and virtualization software.…
The notorious Chinese threat group APT41, also known as Double Dragon, BARIUM, and Winnti, has recently been attributed to developing and deploying advanced Android surveillanceware. Lookout has identified two strains of malware called WyrmSpy and DragonEgg. These discoveries shed light…
In a recent security incident, sensitive personal information of security professionals and government employees associated with the malware scanning platform VirusTotal has been exposed due to a data breach. The breach, originating from a negligent action by an employee, has…
Security researchers from Armis have recently uncovered nine critical vulnerabilities in Honeywell’s Experion distributed control system (DCS) products. These vulnerabilities, if exploited, could allow hackers to gain unauthorized access, remotely run code, and alter the operation of the DCS controllers.…
Identity and access management firm JumpCloud recently disclosed a security incident in which a nation-state hacking group breached its systems. As a precaution, the company reset customers’ API keys and actively addressed the ongoing security incident. This breach specifically targeted…
In the first half of 2023, cybersecurity experts have witnessed a significant increase in cyber attacks utilizing infected USB drives as an initial access vector. This alarming trend, identified by Mandiant, highlights the growing threat posed by USB-based campaigns targeting…