Interlock Ransomware Emerging as a New Force

A relatively new ransomware group called Interlock recently has been targeting high-profile organizations.

Interpol: Cybercrime Disruption Operation Leads to 41 Arrests

Interpol has disclosed a law enforcement operation, which targeted malicious IP addresses and servers linked to various phishing, ransomware and information stealer campaigns

Google Patches Actively Exploited Android Flaws

Google to Require MFA For Google Cloud Users

Google says it is mandating multi-factor authentication for all Google Cloud users that currently sign into their accounts with just a password.

Okta Fixes Odd Bug That Allowed Any Password to Be Accepted

The flaw required a username of 52 characters or more

Apache Fixes RCE Flaw in Lucene.NET Search Engine

The Apache Software Foundation has fixed a remote code execution vulnerability in its Lucene.NET search engine, a bug that affected many of the current versions of the 4.8 beta tree.

🎓️ Vulnerable U | #088

Microsoft threat actor reports, Sophos hack back against Chinese APT, Disney insider threat, some supply chain bugs in Fortune 500 companies, and more!

Microsoft Warns of CovertNetwork-1658 Password Spray Attacks

Researchers are warning of a network of compromised routers, which is maintained by a threat actor in China.

North Korean Group ‘Key Player’ in Recent Ransomware Attack

This incident showcases the first recorded collaboration between Andariel and an underground ransomware network, according to Unit 42 researchers

New Midnight Blizzard Campaign Uses RDP Files to Gain Access

Microsoft researchers have identified a new spear-phishing campaign by Russian threat actor Midnight Blizzard.

Operation Magnus Disrupts RedLine, Meta Infostealer Malware

The international effort, called Operation Magnus, involved the Netherlands, the U.S., Belgium, Portugal, the UK and Australia.