H0lyGh0st ransomware actors target small and midsize businesses
Security researchers from Microsoft warn threat actors from North Korea are using H0lyGh0st ransomware to target small and midsize businesses around the globe.
Cybersecurity Attacks
Securezoo Cybersecurity Threat Center blog posts of new cybersecurity attacks.
ZuoRAT targets SOHO devices to launch sophisticated multi-stage cyber attacks
Threat actors are using a multi-stage malware dubbed ZuoRAT to exploit small office/home office (SOHO) routers and launch sophisticated attacks against North American and European networks.
Maui ransomware targets entities in the Healthcare and Public Health sector
Cybersecurity experts warn North Korean State-Sponsored threat actors are using Maui ransomware to target entities in the Healthcare and Public Health (HPH) sector.
MedusaLocker ransomware threat
Threat actors are exploiting primarily Remote Desktop Protocol (RDP) vulnerabilities on victim computers to deploy MedusaLocker ransomware.
CISA adds 8 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include PwnKit)
The Cybersecurity and Infrastructure Security Agency (CISA) has added eight vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include two Apple, Mitel, Google Chromium, and the RedHat “PwnKit” vulnerability (CVE-2021-4034) in Polkit’s pkexec tool.
CISA adds Critical Microsoft diagnostics tool vulnerability to Catalog of exploited vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has added one Microsoft Support Diagnostic Tool (MSDT) vulnerability CVE-2022-30190 (aka “Follina”) to its Known Exploited Vulnerabilities Catalog.
Symbiote: Linux malware ‘nearly impossible to detect’ threat
Researchers have discovered a new Linux malware dubbed Symbiote, a ‘nearly impossible to detect’ threat.
Microsoft exposes and disables Polonium activity targeting Israeli organizations
Microsoft has exposed and disabled a Lebanon-based Polonium cyber activity targeting Israeli organizations.
Atlassian fixes Critical Confluence RCE vulnerability (CVE-2022-26134) exploited in the wild
Atlassian has fixed a Critical severity unauthenticated zero-day RCE vulnerability (CVE-2022-26134) in Confluence Server and Data Center.
Zoom patches XMPP vulnerability chain that could allow an attacker to compromise user over Zoom chat
Zoom recommends users upgrade their Zoom client to version 5.10.0 to fix an XMPP vulnerability chain that could enable an attacker to execute remote code and compromise another user over Zoom chat.