1+ week, 4+ day ago   (397+ words) One of America’s largest healthcare distributors is investigating a serious data breach which notorious threat actor ShinyHunters has claimed responsibility for. However, the firm revealed in a statement on August 28 that it was investigating an incident “involving third-party applications and…...

1+ mon, 1+ week ago   (417+ words) A cryptomining operation has been observed abandoning root access on compromised Linux servers in favor of impersonating low-privileged users, a deliberate downgrade designed to avoid the alerts that root activity triggers in a security operations center (SOC). According to new…...

1+ mon, 3+ week ago   (435+ words) A new macOS stealer has been observed pairing the paste-a-command social engineering of a ClickFix lure with a coercion routine that rendered the machine unusable until the victim surrendered their password. According to new research from Group-IB published on June…...

5+ mon, 1+ week ago   (320+ words) A.NET-based infostealer sold as part of a commercial cybercrime toolkit that bundles a stealer, crypter and remote access tool (RAT) under subscription tiers has been detailed further by cybersecurity researchers. The malware, known as Phantom Stealer, collects browser credentials, cookies,…...

3+ mon, 4+ week ago   (376+ words) A new variant in the Dirty Frag family of Linux local privilege escalation flaws has surfaced, the third root-level Linux kernel bug disclosed in three weeks. According to new analysis from cloud security firm Wiz, the vulnerability, dubbed Fragnesia and…...

1+ week, 3+ day ago   (520+ words) US healthcare provider Nutex Health has disclosed that a threat actor has stolen sensitive data, including of patients, and threatened to publish it online. The Texas-based firm, which delivers care through facilities throughout the US, made the notification in an…...

2+ mon, 3+ week ago   (467+ words) A cryptocurrency-stealing malware campaign has been spreading by faking its own popularity, dressing up booby-trapped "tools" with bogus GitHub stars, inflated download counts and AI-narrated YouTube tutorials. New analysis from Check Point Research traced the operation to a Rust-based clipboard…...

3+ mon, 1+ day ago   (525+ words) Cybersecurity firm Group-IB has revealed that a recent Interpol-led cybercrime law enforcement operation has led to the takedown of an established phishing-as-a-service (PhaaS) platform and the arrest of its main operator developer. The crackdown, dubbed Operation Ramz, ran from October…...

3+ mon, 3+ week ago   (285+ words) A VPN service used by ransomware operators, fraudsters and data thieves to mask their activity has been taken offline in a coordinated operation led by France and the Netherlands. According to Europol, the law enforcement action ran from May 19 to…...

2+ mon, 1+ week ago   (418+ words) A critical authentication bypass in SimpleHelp's remote monitoring and management (RMM) software has been exploited to deliver two previously unseen malware families, after attackers forged a login token to seize control of a managed network. New analysis from security firm…...