Threat Groups Reportedly Working on Log4Shell Worm
Microsoft Spots Multiple Nation-State APTs Exploiting Log4j Flaw
If defenders needed any more urgency to patch and mitigate the explosive Log4j zero-day, along comes word that APT actors linked to China, Iran, North Korea and Turkey have already pounced and are actively exploiting the CVSS 10.0 vulnerability.
Investors Bet Big on Cloud Security Startups Ermetic, Dazz
Venture capital investors are continuing to bet big on cloud security technologies with two early-stage startups announcing a combined $130 million in funding for products to help businesses secure cloud deployments.
Iran-Linked APT Abuses Slack in Attacks on Asian Airline
The Iran-linked advanced persistent threat (APT) actor MuddyWater was observed deploying a backdoor that abuses Slack on the network of an Asian airline, IBM Security X-Force reports.
Google Says NSO Pegasus Zero-Click ‘Most Technically Sophisticated Exploit Ever Seen’
Security researchers at Google’s Project Zero have picked apart one of the most notorious in-the-wild iPhone exploits and found a never-before-seen hacking roadmap that included a PDF file pretending to be a GIF image with a custom-coded virtual CPU built out of boolean pixel operations.
Corellium Lands $25 Million Investment for Virtualization Tech
Fresh off a high-profile legal triumph over Apple, virtualization technology startup Corellium is now enjoying the attention of investors with Paladin Capital Group leading a $25 million funding round.
Thousands of Industrial Systems Targeted With New ‘PseudoManuscrypt’ Spyware
Tens of thousands of devices around the world, including many industrial control systems (ICS) and government computers, have been targeted in what appears to be an espionage campaign that involves a new piece of malware dubbed PseudoManuscrypt, Kaspersky revealed on Thursday.
Sophisticated Noberus Ransomware First to Be Coded in Rust
Symantec researchers have analyzed what appears to be the first ransomware family written in the Rust programming language.
Grip Security Raises $25 Million to Secure SaaS Applications
Grip Security, an Israeli startup that helps organizations securely adopt software-as-a-service (SaaS), on Tuesday announced the closing of a $19 million Series A funding round led by Intel Capital.
‘Sabbath’ Ransomware Operators Target Critical Infrastructure
Since June 2021, a relatively new ransomware group called Sabbath has been targeting critical infrastructure in the United States and Canada, including education, health and natural resources.
