Three Nigerians have been extradited from the United Kingdom to the United States to face charges in relation to their roles in business email compromise (BEC) fraud schemes, the US Department of Justice announced.
Microsoft Announces Disruption of Russian Espionage APT
Microsoft on Monday announced another major disruption of an APT actor believed to be linked to the Russian government, cutting off access to accounts used for pre-attack reconnaissance, phishing, and email harvesting.
Assange Lawyers Sue CIA for Spying on Them
Lawyers for WikiLeaks founder Julian Assange sued the US Central Intelligence Agency and its former director Mike Pompeo on Monday, alleging it recorded their conversations and copied data from their phones and computers.
Thousands of VNC Instances Exposed to Internet as Attacks Increase
Dark web intelligence firm Cyble reports seeing an increase in cyberattacks targeting virtual network computing (VNC).
The VNC graphical desktop-sharing system relies on the Remote Frame Buffer (RFB) protocol to provide control of a remote machine over a network.
Secure Boot Bypass Flaws Affect Bootloaders of Many Devices Made in Past Decade
Bootloaders present in a majority of computers made in the past 10 years are affected by Secure Boot bypass vulnerabilities, according to firmware security company Eclypsium.
Google Boosts Bug Bounty Rewards for Linux Kernel Vulnerabilities
Google is once again boosting the maximum bounty payouts for Linux vulnerabilities reported as part of its open-source Kubernetes-based capture-the-flag (CTF) vulnerability rewards program (VRP).
Weaponized PLCs Can Hack Engineering Workstations in Attacks on Industrial Orgs
Researchers have shown how hackers could weaponize programmable logic controllers (PLCs) and use them to exploit engineering workstations running software from several major industrial automation companies.
Chinese Cyberspies Use Supply Chain Attack to Deliver Windows, macOS Malware
China-linked cyberespionage group Iron Tiger was observed using the compromised servers of a chat application for the delivery of malware to Windows and macOS systems, Trend Micro reports.
Killnet Releases ‘Proof’ of its Attack Against Lockheed Martin
On August 1, Lockheed Martin was supposedly targeted with a DDoS attack delivered by the pro-Russian hacker group Killnet. The information came via the Moscow Times who reported Killnet’s claim for responsibility.
Newsweek added that Killnet claimed to have stolen Lockheed Martin employee data and threatened to share that data.
US Government Shares Photo of Alleged Conti Ransomware Associate
The United States has been offering significant rewards for information on individuals involved in the Conti ransomware operation and the Department of State on Thursday provided additional details on who it’s looking for and even shared a photo of a suspect.
