Symbiote: Linux malware ‘nearly impossible to detect’ threat
Researchers have discovered a new Linux malware dubbed Symbiote, a ‘nearly impossible to detect’ threat.
Cybersecurity Attacks
Securezoo Cybersecurity Threat Center blog posts of new cybersecurity attacks.
Microsoft exposes and disables Polonium activity targeting Israeli organizations
Microsoft has exposed and disabled a Lebanon-based Polonium cyber activity targeting Israeli organizations.
Atlassian fixes Critical Confluence RCE vulnerability (CVE-2022-26134) exploited in the wild
Atlassian has fixed a Critical severity unauthenticated zero-day RCE vulnerability (CVE-2022-26134) in Confluence Server and Data Center.
Zoom patches XMPP vulnerability chain that could allow an attacker to compromise user over Zoom chat
Zoom recommends users upgrade their Zoom client to version 5.10.0 to fix an XMPP vulnerability chain that could enable an attacker to execute remote code and compromise another user over Zoom chat.
XorDdos: DDoS malware targets Linux systems
Over the past six months, Microsoft has observed a spike in cyberactivity of 254% from XorDdos, a trojan targeting Linux-based cloud systems and Internet of Things (IoT) devices.
CISA adds 5 vulnerabilities to Known Exploited Vulnerabilities Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added five vulnerabilities to its Known Exploited Vulnerabilities Catalog, to include two Apple, two Microsoft and one OpenSSL vulnerability.
Emotet botnet reemerges with new threat behaviors
Researchers from Proofpoint have observed the reemergence of Emotet botnet that has exhibited new behaviors in using new attack techniques.
The Top 15 mostly commonly exploited vulnerabilities in 2021
The Cybersecurity Advisory (CSA) published details on the top 15 vulnerabilities most routinely exploited by malicious cyber actors in 2021. Common CVEs include Log4Shell, ProxyLogon, ProxyShell, ZeroLogon and others.
FBI: BlackCat ransomware has compromised 60 entities worldwide
The Federal Bureau of Investigation (FBI) has released new information on BlackCat (also known as ALPHV) ransomware as a service (RaaS), that has compromised at least 60 entities worldwide as of March 2022.
APT actors targeting ICS/SCADA Devices with custom tools
US Government cybersecurity experts are warning of advanced persistent threat (APT) actors using custom tools to target and compromise multiple industrial control system (ICS) and supervisory control and data acquisition (SCADA) devices.