The Treasury Department is facing pushback from the cryptocurrency industry over sanctions imposed on a firm accused of helping to launder billions of dollars — with some funds going to North Korean hackers.
Iranian Government Hackers Exploit Log4Shell in SysAid Apps for Initial Access
A threat group linked to the Iranian government appears to be the first to exploit the Log4Shell vulnerability in SysAid applications for initial access to the targeted organizations.
New ‘Agenda’ Ransomware Customized for Each Victim
Cybersecurity company Trend Micro is raising the alarm on a new ransomware family called Agenda, which has been used in attacks on organizations in Asia and Africa.
Written in the Golang (Go) cross-platform programming language, the threat has the ability to reboot systems in safe mode and to stop server-specific processes and services.
CISA Urges Critical Infrastructure to Prepare for Post-Quantum Cryptography
The US Cybersecurity and Infrastructure Security Agency (CISA) has outlined the steps that critical infrastructure organizations should take to prepare for the migration to the new post-quantum cryptographic standard.
CISA: Vulnerability in Delta Electronics ICS Software Exploited in Attacks
A vulnerability affecting industrial automation software from Delta Electronics appears to have been exploited in attacks, and the US Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to take action as soon as possible.
Twitter Ordered to Give Musk Additional Bot Account Data
A US judge told Twitter on Thursday to surrender more data to Elon Musk on fake accounts, a key issue the billionaire is using to try to cancel his buyout bid.
LastPass Says Source Code Stolen in Data Breach
Password management software firm LastPass has suffered a data breach that led to the theft of source code and proprietary technical information.
Leaked Docs Show Spyware Firm Offering iOS, Android Hacking Services for $8 Million
Leaked documents appear to show a little-known spyware company offering services that include Android and iOS device exploits for €8 million (roughly $8 million).
XIoT Vendors Show Progress on Discovering, Fixing Firmware Vulnerabilities
Self-disclosures by XIoT vendors have surpassed independent research outfits as the second most prolific vulnerability reporters
Cisco Patches High-Severity Vulnerabilities in Business Switches
Cisco this week announced patches for two vulnerabilities impacting the NX-OS software that powers its Nexus-series business switches.
Impacting the OSPF version 3 (OSPFv3) feature of NX-OS, the first of these issues is tracked as CVE-2022-20823 and could be exploited remotely, without authentication, to cause a denial-of-service (DoS) condition.
