BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11,

A stealthy Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus has become the first publicly known malware capable of bypassing Secure Boot defenses, making it a potent threat in the cyber landscape.
« This bootkit can run even on fully up-to-date Windows 11 systems with UEFI Secure Boot enabled, » Slovak cybersecurity company ESET said in a report shared with The Hacker News.

,

A stealthy Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus has become the first publicly known malware capable of bypassing Secure Boot defenses, making it a potent threat in the cyber landscape.
« This bootkit can run even on fully up-to-date Windows 11 systems with UEFI Secure Boot enabled, » Slovak cybersecurity company ESET said in a report shared with The Hacker News.

, ,
https://thehackernews.com/2023/03/blacklotus-becomes-first-uefi-bootkit.html

CISOs Are Stressed Out and It’s Putting Companies at Risk

CISOs Are Stressed Out and It’s Putting Companies at Risk

,

Employee well-being has become a primary focus for many businesses. Even before the pandemic, the C-suite was acutely aware of how employee mental health impacts business outcomes. 
But for cybersecurity professionals, stress has always been a part of the job.
A new survey revealed that one of the most concerning aspects of employee mental health is how it impacts cybersecurity programs and,

,

Employee well-being has become a primary focus for many businesses. Even before the pandemic, the C-suite was acutely aware of how employee mental health impacts business outcomes. 
But for cybersecurity professionals, stress has always been a part of the job.
A new survey revealed that one of the most concerning aspects of employee mental health is how it impacts cybersecurity programs and,

, ,
https://thehackernews.com/2023/03/cisos-are-stressed-out-and-its-putting.html

LastPass révèle comment des hackers ont volé vos mots de passe

LastPass révèle comment des hackers ont volé vos mots de passe,

lastpass

LastPass est longuement revenu sur les deux attaques informatiques de l’année dernière. Après enquête, le gestionnaire a finalement découvert comment des pirates sont parvenus à s’emparer des mots de passe de ses clients.

,

lastpass

LastPass est longuement revenu sur les deux attaques informatiques de l’année dernière. Après enquête, le gestionnaire a finalement découvert comment des pirates sont parvenus à s’emparer des mots de passe de ses clients.

, ,
https://www.01net.com/actualites/lastpass-revele-comment-hackers-vole-mots-passe.html

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy,

Google has announced the general availability of client-side encryption (CSE) for Gmail and Calendar, months after piloting the feature in late 2022.
The data privacy controls enable « even more organizations to become arbiters of their own data and the sole party deciding who has access to it, » Google’s Ganesh Chilakapati and Andy Wen said.
To that end, users can send and receive emails or

,

Google has announced the general availability of client-side encryption (CSE) for Gmail and Calendar, months after piloting the feature in late 2022.
The data privacy controls enable « even more organizations to become arbiters of their own data and the sole party deciding who has access to it, » Google’s Ganesh Chilakapati and Andy Wen said.
To that end, users can send and receive emails or

, ,
https://thehackernews.com/2023/03/gmail-and-google-calendar-now-support.html

Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques

Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques,

Cryptocurrency companies are being targeted as part of a new campaign that delivers a remote access trojan called Parallax RAT.
The malware « uses injection techniques to hide within legitimate processes, making it difficult to detect, » Uptycs said in a new report. « Once it has been successfully injected, attackers can interact with their victim via Windows Notepad that likely serves as a

,

Cryptocurrency companies are being targeted as part of a new campaign that delivers a remote access trojan called Parallax RAT.
The malware « uses injection techniques to hide within legitimate processes, making it difficult to detect, » Uptycs said in a new report. « Once it has been successfully injected, attackers can interact with their victim via Windows Notepad that likely serves as a

, ,
https://thehackernews.com/2023/03/parallax-rat-targeting-cryptocurrency.html

Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain

Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain,

Romanian cybersecurity company Bitdefender has released a free universal decryptor for a nascent file-encrypting malware known as MortalKombat.
MortalKombat is a new ransomware strain that emerged in January 2023. It’s based on a commodity ransomware dubbed Xorist and has been observed in attacks targeting entities in the U.S., the Philippines, the U.K., and Turkey.
Xorist, detected since 2010,

,

Romanian cybersecurity company Bitdefender has released a free universal decryptor for a nascent file-encrypting malware known as MortalKombat.
MortalKombat is a new ransomware strain that emerged in January 2023. It’s based on a commodity ransomware dubbed Xorist and has been observed in attacks targeting entities in the U.S., the Philippines, the U.K., and Turkey.
Xorist, detected since 2010,

, ,
https://thehackernews.com/2023/02/bitdefender-releases-free-decryptor-for.html

Android : une armée de malwares cible votre compte bancaire, c’est de pire en pire

Android : une armée de malwares cible votre compte bancaire, c’est de pire en pire,

Caméra espion

De plus en plus de malwares bancaires visent les smartphones Android. D’après une étude de Kaspersky, les pirates désireux de piller un compte en banque se concentrent désormais sur les téléphones de leurs victimes. Pour arriver à leurs fins, ils se servent du Google Play Store…

,

Caméra espion

De plus en plus de malwares bancaires visent les smartphones Android. D’après une étude de Kaspersky, les pirates désireux de piller un compte en banque se concentrent désormais sur les téléphones de leurs victimes. Pour arriver à leurs fins, ils se servent du Google Play Store…

, ,
https://www.01net.com/actualites/android-armee-malwares-cible-compte-bancaire.html

New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises

New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises,

A new post-exploitation framework called EXFILTRATOR-22 (aka EX-22) has emerged in the wild with the goal of deploying ransomware within enterprise networks while flying under the radar.
« It comes with a wide range of capabilities, making post-exploitation a cakewalk for anyone purchasing the tool, » CYFIRMA said in a new report.
Some of the notable features include establishing a reverse shell

,

A new post-exploitation framework called EXFILTRATOR-22 (aka EX-22) has emerged in the wild with the goal of deploying ransomware within enterprise networks while flying under the radar.
« It comes with a wide range of capabilities, making post-exploitation a cakewalk for anyone purchasing the tool, » CYFIRMA said in a new report.
Some of the notable features include establishing a reverse shell

, ,
https://thehackernews.com/2023/02/new-ex-22-tool-empowers-hackers-with.html

Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain

Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain,

Romanian cybersecurity company Bitdefender has released a free decryptor for a new ransomware strain known as MortalKombat.
MortalKombat is a new ransomware strain that emerged in January 2023. It’s based on commodity ransomware dubbed Xorist and has been observed in attacks targeting entities in the U.S., the Philippines, the U.K., and Turkey.
Xorist, detected since 2010, is distributed as a

,

Romanian cybersecurity company Bitdefender has released a free decryptor for a new ransomware strain known as MortalKombat.
MortalKombat is a new ransomware strain that emerged in January 2023. It’s based on commodity ransomware dubbed Xorist and has been observed in attacks targeting entities in the U.S., the Philippines, the U.K., and Turkey.
Xorist, detected since 2010, is distributed as a

, ,
https://thehackernews.com/2023/02/bitdefender-releases-free-decryptor-for.html

New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises

New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises,

A new post-exploitation framework called EXFILTRATOR-22 (aka EX-22) has emerged in the wild with the goal of deploying ransomware within enterprise networks while flying under the radar.
« It comes with a wide range of capabilities, making post-exploitation a cakewalk for anyone purchasing the tool, » CYFIRMA said in a new report.
Some of the notable features include establishing a reverse shell

,

A new post-exploitation framework called EXFILTRATOR-22 (aka EX-22) has emerged in the wild with the goal of deploying ransomware within enterprise networks while flying under the radar.
« It comes with a wide range of capabilities, making post-exploitation a cakewalk for anyone purchasing the tool, » CYFIRMA said in a new report.
Some of the notable features include establishing a reverse shell

, ,
https://thehackernews.com/2023/02/new-ex-22-tool-empowers-hackers-with.html