Chinese Gov’t Fronts Trick the West to Obtain Cyber Tech Summary Recorded Future’s investigation spotlights a little-known Beijing research network — the Beijing Institute of Electronics Technology and Application (BEITA),…
Red Hat Hackers Team Up With Scattered Lapsus$ Hunters Summary Crimson Collective — a new extortion-focused crime group — claims to have breached a self-managed GitLab instance used by Red…
Medusa Ransomware Actors Exploit Critical Fortra GoAnywhere Flaw Summary Threat actors deploying Medusa ransomware (linked to Storm-1175) have been observed exploiting a maximum-severity deserialization vulnerability in Fortra’s GoAnywhere managed file…
Chaos Ransomware Upgrades With Aggressive New C++ Variant Summary FortiGuard Labs has documented a new, more aggressive Chaos ransomware variant rewritten in C++ (Chaos-C++). The variant introduces faster, more destructive…
Chinese Hackers Use Velociraptor IR Tool in Ransomware Attacks Summary Researchers from Cisco Talos observed China-based threat group Storm-2603 (also tracked as Gold Salem) abusing the open-source DFIR tool Velociraptor…
Microsoft Drops Terrifyingly Large October Patch Update Summary Microsoft’s October Patch Tuesday is enormous: 175 CVEs were patched, including multiple zero-days that are already being exploited and several flaws Microsoft…
China’s Flax Typhoon Turns Geo-Mapping Server into a Backdoor Summary Researchers at Reliaquest uncovered a sustained compromise by a Chinese APT group tracked as Flax Typhoon that turned a public-facing…
Feds Shutter ShinyHunters Salesforce Extortion Site Summary The FBI, working with French law enforcement, seized the BreachForums domain that had been repurposed as an extortion portal by the group calling…
Cyberattackers Target LastPass, Top Password Managers Summary Major password managers — including LastPass, 1Password and Bitwarden — have been impersonated in a wave of phishing attacks. Over a three-week period…
Leaks in Microsoft VS Code Marketplace Put Supply Chain at Risk Summary Researchers at Wiz found more than 550 validated secrets exposed inside VS Code extension packages across Microsoft’s VS…
