Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3804 articles
The roundup covers LockBit’s return after a law-enforcement takedown, phishing impersonating US agencies, threat campaigns targeting multiple regions and industries, Nemesis Market’s seizure, and Russian actors’ access to Microsoft systems.
Wiz announced GitHub security posture management that checks 30+ configuration rules, evaluates risks such as misconfigurations and exposed secrets, and maps potential attack paths into cloud environments.
CISA and the NSA released ten cloud-security strategies covering shared responsibility, identity and key management, network security, data protection, CI/CD, cloud deployment, hybrid and multi-cloud risks, service providers, and logging.
Wiz announced AI-generated remediation guidance that uses attack-path context from its Security Graph to produce cloud-risk fixes. The company says it minimizes and redacts data shared with third parties.
Wiz announced image validation through its CLI and admission controller, plus near-real-time Kubernetes audit-log collection and correlation in Wiz CDR to help enforce image policies and detect suspicious cluster activity.
DarkOwl’s new forum-structuring feature separates forum threads into searchable posts with usernames and post dates, enabling thread reconstruction, filtering by post date, and pivots to other activity by a user.
Wiz announced a cloud security CTF with five Kubernetes networking scenarios based on misconfigurations encountered in real-world research. Participants can practice exploiting them in a controlled environment, online or in teams.
Huntress observed attackers accessing existing TeamViewer installations with known credentials to attempt ransomware deployment, install XMRig, or exfiltrate data. The incidents did not appear to involve a TeamViewer vulnerability or misconfiguration.
A February roundup covers law-enforcement actions against LockBit and Warzone RAT, phishing and malware campaigns, alleged data theft, and a ransomware attack that Johnson Controls said cost $27 million.
A two-year Group-IB investigation helped INTERPOL and Moroccan police apprehend a suspect linked to phishing, fraud, malware development, and attacks on French companies and more than 130 websites.
A multinational operation seized LockBit infrastructure and led to arrests and indictments, but the group claimed it resumed operations after four days. DarkOwl says the takedown’s lasting impact remains uncertain.
A Group-IB investigation with Dutch police identified two people behind Fraud Family, a phishing-as-a-service operation targeting Dutch and Belgian residents. Police arrested the suspects and warned buyers of the group’s tools.
DarkOwl analysts describe darknet discussions promoting romance scams and e-whoring, including guides and victim data. The article also cites 2022 reported losses and advises people to verify online contacts and avoid sending money.
Hunt introduced Tag Cloud, a feature that labels and visualizes threat-intelligence artifacts and activity to help security professionals identify patterns, assess exposed directories, and support threat hunting.
DarkOwl analysts report seeing accounts and credentials for betting, banking, ticketing and streaming services advertised on darknet forums and Telegram, highlighting potential account-takeover and supply-chain risks around the Super Bowl.
Wiz added Amazon Bedrock support to its AI-SPM tools, offering visibility into custom models and training data, configuration checks, and attack-path analysis for Bedrock models.
Huntress reported concern about a possibly compromised AnyDesk signing certificate after a maintenance period and certificate change. AnyDesk said it had no evidence end-user devices were affected and urged users to install the latest version with the new certificate.
A January roundup highlights claims about Chinese access to AirDrop metadata, a Ukrainian cryptojacking arrest, SMTP smuggling, rising DDoS attacks, Google account-session abuse, ransomware incidents and cybercrime enforcement.
An INTERPOL-coordinated operation with Group-IB and national agencies shut down 16shop, a phishing-as-a-service platform linked to more than 150,000 phishing domains, and led to three suspect arrests.
Group-IB traced the Dragon botnet used for DDoS attacks to its operator, helped law enforcement take down the botnet, and supported an investigation that led to the operator’s arrest, conviction, and suspended sentence in 2012.
Wiz has made its curated database of publicly disclosed cloud-related incidents and campaigns public, covering threat actors, tools, techniques, targeted technologies, and activity from 2019 to the present.
Wiz’s new preview integration scans Terraform configurations for secrets and misconfigurations at the post-plan or pre-apply stage. Workspaces can make failed checks advisory or mandatory, with mandatory failures stopping deployment.
Wiz says its new OpenAI connector maps models, Assistants, fine-tuning jobs, users, and training data, and identifies risks such as exposed secrets, sensitive data, misconfigurations, and excessive permissions across OpenAI and cloud environments.
A December roundup highlights Russia-linked disinformation, the FBI’s disruption of ALPHV, the Kyivstar outage, law-enforcement arrests and marketplace seizures, and an unverified release of 1.9 million credit cards.
