Chinese APT’s favorite vulnerabilities revealed

Categories: Exploits and vulnerabilities

Categories: News

Tags: Chinese APT

Tags: advanced persistent threat

Tags: APT

Tags: CISA

Tags: NSA

Tags: FBI

Tags: security advisory

CISA, the NSA and the FBI have compiled a list of the vulnerabilities targeted by state-sponsorted threat actors from China.

(Read more…)

The post Chinese APT’s favorite vulnerabilities revealed appeared first on Malwarebytes Labs.

Read more

BOD 23-01: Improving asset visibility and vulnerability detection on federal networks

Categories: News

Tags: BOD 23-01

Tags: asset visibility

Tags: vulnerability detection

Tags: federal networks

Tags: CISA

Tags: CDM

Tags:

CISA has issued BOD 23-10 which requires all FCEB entities to maintain an inventory of all IPv4- and IPv6-networked assets, perform regular, periodic scans of these devices, and provide this information to CISA.

(Read more…)

The post BOD 23-01: Improving asset visibility and vulnerability detection on federal networks appeared first on Malwarebytes Labs.

Read more

Warning issued about Vice Society ransomware targeting the education sector

Categories: News

Categories: Ransomware

Tags: FBI

Tags: CISA

Tags: StopRansomware

Tags: Vice Society

Tags: HelloKitty

Tags: SonicWall

Tags: PrintNightmare

Tags: LAUSD

The FBI, CISA, and the MS-ISAC have released a joint Cybersecurity Advisory after observing Vice Society threat actors disproportionately targeting the education sector with ransomware attacks.

(Read more…)

The post Warning issued about Vice Society ransomware targeting the education sector appeared first on Malwarebytes Labs.

Read more

A week in security (August 22 – August 28)

Categories: News

Tags: cryptojackers

Tags: CISA

Tags: Reddit

Tags: social engineering

Tags: Google

Tags: PLex

Tags: Hikvision

Tags: patch management

Tags: ChromeOS

Tags: Twitter

Tags: Binance

Tags: Gitlab

Tags: TrickBot

Tags: LastPass

The important security news of this week

(Read more…)

The post A week in security (August 22 – August 28) appeared first on Malwarebytes Labs.

Read more

NetStandard attack should make Managed Service Providers sit up and take notice

Credit to Author: Pieter Arntz| Date: Wed, 03 Aug 2022 16:48:37 +0000

The attack on MSP NetStandard reminds us once again that MSPs are a very attractive target for cybercriminals

The post NetStandard attack should make Managed Service Providers sit up and take notice appeared first on Malwarebytes Labs.

Read more

North Korean APT targets US healthcare sector with Maui ransomware

Credit to Author: Jovi Umawing| Date: Sun, 10 Jul 2022 21:43:29 +0000

CISA warns of an unusual ransomware.

The post North Korean APT targets US healthcare sector with Maui ransomware appeared first on Malwarebytes Labs.

Read more

Dial 311 for… cybersecurity emergencies?

Credit to Author: Malwarebytes Labs| Date: Thu, 23 Jun 2022 15:51:59 +0000

Cybersecurity experts want a hotline for SMBs to further encourage cyber incident reporting, especially those involving ransomware attacks.

The post Dial 311 for… cybersecurity emergencies? appeared first on Malwarebytes Labs.

Read more

Karakurt extortion group: Threat profile

Credit to Author: Jovi Umawing| Date: Tue, 14 Jun 2022 16:00:29 +0000

An obscure group called Karakurt has extorted organizations in the US and elsewhere. Know how to keep it away from your network.

The post Karakurt extortion group: Threat profile appeared first on Malwarebytes Labs.

Read more