article thumbnail

Cyber Defense Magazine – November 2020 has arrived. Enjoy it!

Security Affairs

Cyber Defense Magazine November 2020 Edition has arrived. SecurityAffairs – hacking, Cyber Defense Magazine November 2020 ). The post Cyber Defense Magazine – November 2020 has arrived. We hope you enjoy this month’s edition…packed with over 150 pages of excellent content. Always free, no strings attached.

IT 125
article thumbnail

Do Ransomware Operators Have a Russian Government Nexus?

Data Breach Today

Maze was one of the most notorious and successful ransomware operations of recent years until its apparent "retirement" and handover to Egregor in November 2020. Some rivals have suggested both groups have ties to the Russian government. Supposed Rivals Said Maze Gang Had Moscow Backing - But Was That Just Sour Grapes?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

Since at least June 2020, and possibly earlier, the cyberespionage group has used the tool GooseEgg to exploit the CVE-2022-38028 vulnerability. CISA added the Windows Print Spooler flaw CVE-2022-38028 to its Known Exploited Vulnerabilities catalog. The vulnerability CVE-2022-38028 was reported by the U.S.

IT 130
article thumbnail

Google: China dominates government exploitation of zero-day vulnerabilities in 2023

Security Affairs

In 2023, the researchers attributed a combined total of 48 out of 58 zero-day vulnerabilities to commercial surveillance vendors (CSVs) and government espionage actors, while 10 zero-day flaws were attributed to financially motivated actors. In 2023, Google (TAG) and Mandiant discovered 29 out of 97 vulnerabilities exploited in the wild.

article thumbnail

Stayin’ Alive campaign targets high-profile Asian government and telecom entities. Is it linked to ToddyCat APT?

Security Affairs

A cyberespionage campaign, tracked as Stayin’ Alive, targeted high-profile government and telecom entities in Asia. The APT group was discovered in June 2022 by Kaspersky which linked it to a series of attacks aimed at high-profile entities in Europe and Asia since at least December 2020.

article thumbnail

Russia-linked APT TAG-70 targets European government and military mail servers exploiting Roundcube XSS

Security Affairs

The nation-state actors are known to carry out cyber-espionage against targeting government, military, and national infrastructure entities in Europe and Central Asia since at least December 2020. “TAG70 has demonstrated a high level of sophistication in its attack methods. . ESET researchers also detailed the same attack chain.

Military 122
article thumbnail

TikTok Banned on UK Government Devices

IT Governance

The UK government has announced plans to ban ministers and civil servants from using TikTok on work devices. The problems stem from TikTok’s ties to the Chinese government and the ways that people’s personal data could be used for nefarious purposes. Are these rumours founded?