SEARCH
All Articles
Russian Government, Cybercriminal Cooperation a ‘Force Multiplier’
The Russian government's tolerance and sometime cooperation with the cybercriime groups in the country makes the threat from both factions even more serious, US officials say.
Lawmakers Release Federal Data Privacy Draft Bill
The draft bill looks at several key issues related to data privacy in the U.S., including data collection and sharing policies, opt-out practices and more.
Decipher Podcast: Source Code 6/3
This week's Source Code podcast by Decipher takes a look behind the scenes at top news with input from our sources.
GitLab Patches Critical Account Takeover Flaw
The critical flaw (CVE-2022-1680) can allow for account takeover in impacted installations that have not been upgraded.
Zero Day in Atlassian Confluence Under Attack
A newly disclosed zero day in some versions of Atlassian Confluence and Data Center is under attack and being used to install webshells on target servers.
Evil Corp Affiliates Deploy LockBit Ransomware to Sidestep Sanctions
A threat cluster with significant overlap to the Evil Corp cybercriminal gang has started deploying the LockBit ransomware in an effort to evade U.S. sanctions.
CISA Warns of Karakurt Extortion Group
The Karakurt data extortion group is stealing sensitive information from enterprises and holding it for ransom, CISA warns.
Enterprise Ransomware Attacks Are Getting Faster
The average ransomware attack duration - from the initial access to the deployment of the ransomware payload at scale - was under four days in 2021.
Attackers Continue to Target Critical WSO2 Flaw
Weeks after the disclosure of the vulnerability (CVE-2022-29464) in WSO2 products, attackers are leveraging the flaw to install Linux-compatible Cobalt Strike beacons, cryptocurrency miners and more.
Cheerscrypt Linux-Based Ransomware Targets VMware ESXi Servers
The new Linux-based ransomware is only the latest to target VMware ESXi servers.
Exploits Target Zero Day in Windows and Office
A zero day flaw (CVE-2022-30190) in Windows and Office is under active attack and MIcrosoft has not issued a patch yet.
Interpol Arrests Alleged Head of BEC Cybercrime Syndicate
Interpol and private-sector companies announced the arrest of the alleged leader of a well-known phishing and BEC group.
Ransomware Safe Havens, Reporting Inconsistencies Trouble Authorities
Despite the U.S. government adopting many recommendations by the Ransomware Task Force in combating ransomware, authorities still grapple with several challenges that enable the ransomware ecosystem to thrive.
Cisco Patches Serious Flaw in IOS
Cisco has patched a flaw in IOS XR that can allow an attacker to write arbitrary files to the Redis instance.
Decipher Podcast: Source Code 5/20
Welcome back to Source Code, Decipher’s weekly news wrap podcast.