Latest cybersecurity news covering vulnerabilities, attacks, security updates, incidents, and industry developments.
3810 articles
DarkOwl reports that Tor’s move to disable v2 onion services has not made them inaccessible to all legacy clients. Its collection found 62% of observed active onion services still used v2 addresses.
Talos's weekly roundup summarizes nine prevalent threats, including Tofsee, Dridex, Upatre, Qakbot, and Remcos, with malware behavior, IOCs, and detection coverage based on sample analysis.
Talos summarized eight prevalent malware threats observed Oct. 29–Nov. 5, including information stealers, RATs, a banking trojan and ransomware. The roundup includes sample-derived indicators and describes security-product coverage.
Huntress introduced managed and self-managed host isolation, blocking most inbound and outbound connections on infected Windows hosts. Isolation tasks are processed within seconds when a host is online, and connectivity is restored after the incident is resolved.
Huntress announced managed Microsoft Defender Antivirus, beta host isolation that blocks network activity on affected hosts, and 24/7 threat-hunting coverage beginning in October across the US, Canada, UK and Australia.
DarkOwl reports that a group called xgroup advertised altering EU hospital vaccination records for darknet buyers, but found no proof of its capabilities and assessed the risk to the EU Digital COVID Certificate as low.
Huntress announced a managed Microsoft Defender service for centralized antivirus monitoring and management, with endpoint status, policy configuration, alert triage, and remediation capabilities.
Huntress launched UnlockedComputer[.]com, a free training page that IT admins or authorized employees can display on unattended devices to explain why and how to lock Windows or Mac computers.
DarkOwl reviews AlphaBay’s 2021 relaunch, citing service instability, skeptical user reactions and signs that a surface-web lookalike may be phishing users. Analysts question the new market’s legitimacy but cannot confirm who runs it or whether it is a law-enforcement r
DarkOwl observed AvosLocker Tor services in July 2021, including a victim negotiation portal, a press-release site listing at least six victims, and an affiliate portal. Analysts said resemblance to DoppelPaymer’s site was not proof of a connection.
DarkOwl profiles emerging ransomware groups, describing their darknet activity, claimed affiliations, apparent targets, and public victim-shaming or data-leak practices.
A curated Black Hat 2021 lineup highlights sessions on Wi-Fi and cloud vulnerabilities, HTTP/2 attacks, DNS data leakage, SIEM design, IPv6 geolocation, blockchain exploitation, timing attacks, and brand-impersonation detection.
DarkOwl says REvil’s latest victim announcements point to possible targeting of suppliers linked to military and government entities, while stressing that some claims and alleged access remain unverified.
The article outlines seven measures in President Biden’s 2021 cybersecurity executive order, including threat-information sharing, zero trust, software supply-chain standards, incident reviews, response playbooks, EDR, and federal logging requirements.
DarkOwl reports darknet and Telegram offers for COVID-19 vaccines, vaccination cards and passports, alongside vaccine disinformation. It warns that vaccination records and passport systems could be targets for data theft.
Huntress announced a $40 million Series B round led by JMI Equity, with existing investors participating. The company said funding would support platform expansion, product development and broader security services for SMBs.
DarkOwl reported criminals selling state-specific guides and using stolen identities or hijacked claimant accounts to divert pandemic unemployment benefits, while states strengthened identity checks and fraudsters advertised bypasses.
Wiz announced a $130 million Series B and plans to invest in its cloud-security business and team. The company says its platform connects to multi-cloud environments and that more than 10% of Fortune 500 companies used it within three months of its launch from stealth.
DarkOwl analysts reported more Android RAT offerings on darknet forums in 2020, describing malware capabilities, COVID-themed lures, mobile ransomware, and distribution methods; some advertised tools’ effectiveness was unverified.
DarkOwl reported that Seller13 advertised alleged SolarWinds-related data for sale and later promoted “Shiny Leaks.” The researchers said the seller’s identity and data authenticity remain unconfirmed and suggested the operation may be a scam.
Huntress introduced a service for partners to centrally monitor and manage Microsoft Defender Antivirus settings, alerts, and endpoint health across their Windows devices.
DarkOwl reports finding SolarWinds vulnerability discussions and product files on darknet forums and unsecured FTP servers, with much of the activity dating to late 2019 and early 2020.
A trojanized SolarWinds Orion update distributed the SUNBURST backdoor, which could provide network access and deliver further payloads. The article describes affected versions, emerging detections, and recommended updates and mitigations.
Wiz announced a $100 million Series A and unveiled a cloud security platform that it says scans cloud environments without agents or sidecars for vulnerabilities, configuration, network, and identity issues.
