Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3810 articles
Huntress says it protects 1.5 million endpoints and handles up to 700,000 requests per minute. It describes a request-processing issue, its response, and the data-processing demands of its EDR features.
DarkOwl says SiegedSec defaced websites and leaked data linked to at least 30 companies. The analysts describe the group’s activity, possible members and affiliations, while noting the full impact of its attacks is unknown.
DarkOwl reported that Conti’s administrative and negotiation panels went offline, but its victim blog remained active. The group announced 24 new victims since May 19, leaving claims that it had shut down unsubstantiated.
Wiz announced automated cloud attack path analysis and Cloud Detection and Response features, including exposure simulation, graph-enriched event monitoring, workload forensics, and tools to connect developers and security teams.
Wiz launched cloud detection and response features using cloud activity logs and its Security Graph, alongside cross-account, cross-cloud attack-path analysis. The company says its analysis of over 5 million workloads found an average of 200 critical risks per scanned企业
DarkOwl reviewed darknet and deep-web listings for multiple infostealers, finding a low-cost malware-as-a-service market offering tools that steal credentials, cookies, payment data and crypto wallets. The article profiles their capabilities, C2 models and market trends
Huntress opened its API to all accounts in public beta, providing read-only access to six data areas, including agents and incident reports. The company said a private-beta penetration test found two minor issues that were resolved.
DarkOwl’s review of the first 77 days of the Ukraine war describes volunteer-led cyberattacks, data leaks and information operations targeting Russia, while noting limited observed disruption to Russian critical infrastructure and ongoing Russian-linked attacks.
Germany announced Hydra's seizure; the U.S. indicted an alleged facilitator and sanctioned Hydra and Garantex. DarkOwl says users may move to other darknet markets, while a Hydra representative claimed restoration was underway.
DarkOwl reports that RaidForums went inactive amid claims its domain was seized, while replacement forums emerged. BreachedForums reportedly attracted thousands of members and distributed large volumes of claimed leaked data.
DarkOwl’s review found Conti and LockBit 2.0 led reported victim counts after February 24, 2022; it also described activity by Pandora, STORMOUS and LAPSUS$, and noted geographic patterns in reported victims.
Wiz announced an integration with ServiceNow Vulnerability Response that syncs cloud vulnerability findings, remediation recommendations, and asset data into existing workflows to help security and IT teams prioritize and address risks.
DarkOwl describes LAPSUS$ activity against organizations in Brazil and Portugal, including alleged data theft and service disruptions. The group’s responsibility for some incidents, including attacks affecting Vodafone and Cofina, remained unconfirmed.
Wiz says its cloud security platform now incorporates CISA KEV data, letting users find vulnerable cloud resources and prioritize remediation using exposure and privilege context.
Huntress said nine vendors pledged a combined $75,000 to support DIVD after Huntress announced a $100,000 donation. Vendors also discussed transparency, responsible disclosure and a planned vulnerability disclosure program workshop.
DarkOwl says darknet and deep-web sources mix AHI conspiracy theories and anti-U.S. propaganda with archived RF and directed-energy documents and jammer advertisements; claims that these materials enable attacks remain unverified.
DarkOwl found more than 30% of known Tor markets unreachable in late December, amid reported DDoS attacks and theories ranging from exit scams to seizures. Several later returned, and the cause remained unclear.
Huntress’s Ransomware Canaries update adds XLSX and PDF canaries, monitoring in system profiles, partner branding, and improved differentiation between EFS encryption and potentially malicious encryption.
DarkOwl reviews 2021 darknet-related security developments, including ransomware, supply-chain attacks, access brokers, healthcare threats and cyber conflict, and forecasts which trends may continue or escalate in 2022.
Huntress announced a $100,000 contribution to DIVD: half for staffing and growth, half to launch a bug bounty program for vulnerabilities in MSP and SMB IT tools. Other vendors later pledged a combined $75,000.
Talos’s weekly roundup covers nine prevalent malware threats, including Qakbot, Tofsee and Gh0stRAT, summarizing their capabilities and sharing sample-derived IOCs, hashes and detection coverage.
An analysis of more than 200 enterprise cloud environments found 93% at risk from Log4Shell and an average 45% of vulnerable cloud resources patched by Dec. 20, 2021.
Talos's Nov. 26–Dec. 3 roundup highlights eight prevalent malware threats, including Emotet, DarkComet, Nanocore and credential-stealing Trojans, with sample IOCs and product coverage information.
Wiz announced an integration that combines Amazon Inspector findings for EC2 instances and ECR images with Wiz’s cloud-configuration and workload assessments to provide prioritized risk context.
