Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 133 stories in 24 hours
Nation-State Threats
The incidents, breaches and state campaigns making headlines.
15stories this week
2today
the last seven days
Most fromThe Hacker News, Securelist (Kaspersky), Cybersecurity Dive, CyberScoop
In the news hereConnectWise2Lazarus2APT28 (Fancy Bear)2Microsoft1Ivanti1Citrix1APT411
MyCyberWay trainingBreaches like this get investigated, not just reported.See Blue Team Specialist
-
U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang.
TechCrunch
-
Explore joint Cisco Talos and Recorded Future research on TAG-193’s cyber-espionage operations targeting government across Central Asia and the wider Commonwealth of Independent States (CIS)
Recorded Future
-
Operation Lonestar Roundup uncovered an operation that used stolen identities to secretly funnel $3 million from 70 U.S. employers back to Pyongyang.
CyberScoop
-
The Democratic People’s Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
Dark Reading
-
More than 40 residences in Texas were the target of a federal operation in September to clamp down on remote worker scams that feed money back to the North Korean regime.
The Record
-
North Korean hackers have been targeting Ukrainian experts in diplomacy, security and international policy amid Pyongyang’s growing military cooperation with Russia.
The Record
-
The Belarusian Cyber Partisans concurred with Russian research that they indeed spent months inside the network for the Moscow Department of Health.
The Record
-
The NCSC’s joint advisory names perennial offender Integrity Technology, accusing it of facilitating cyber attacks on behalf of Flax Typhoon, a Chinese state threat actor.
Computer Weekly
-
The infrastructure supported an international hacking campaign that targeted critical infrastructure, including a South Carolina-based power company.
Cybersecurity Dive
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below – CVE-2015-3306 (CVSS score: 10.0) – An improper access control vulnerability in ProFTPD that could…
The Hacker News
-
DOJ and FBI seized China-linked hacking tools Microscan and FishHub, linked to Integrity Tech and attacks on critical infrastructure worldwide. The Justice Department and FBI took down two hacking tools this week, Microscan and FishHub, both built and run by a Beijing-based company with direct government contracts. The tools were used to scan, and in…
Security Affairs
-
U.S. officials seized seven domains linked to Flax Typhoon as security agencies in seven countries warned of attempts to steal sensitive data worldwide.
Bitdefender
