New Golang-based ‘Agenda Ransomware’ Can Be Customized For Each Victim

New Golang-based ‘Agenda Ransomware’ Can Be Customized For Each Victim

,

A new ransomware strain written in Golang dubbed « Agenda » has been spotted in the wild, targeting healthcare and education entities in Indonesia, Saudi Arabia, South Africa, and Thailand.
« Agenda can reboot systems in safe mode, attempts to stop many server-specific processes and services, and has multiple modes to run, » Trend Micro researchers said in an analysis last week.
Qilin, the threat

,

A new ransomware strain written in Golang dubbed « Agenda » has been spotted in the wild, targeting healthcare and education entities in Indonesia, Saudi Arabia, South Africa, and Thailand.
« Agenda can reboot systems in safe mode, attempts to stop many server-specific processes and services, and has multiple modes to run, » Trend Micro researchers said in an analysis last week.
Qilin, the threat

, ,
https://thehackernews.com/2022/08/new-golang-based-agenda-ransomware-can.html

Nitrokod Crypto Miner Infected Over 111,000 Users with Copies of Popular Software

Nitrokod Crypto Miner Infected Over 111,000 Users with Copies of Popular Software,

A Turkish-speaking entity called Nitrokod has been attributed to an active cryptocurrency mining campaign that involves impersonating a desktop application for Google Translate to infect over 111,000 victims in 11 countries since 2019. 
« The malicious tools can be used by anyone, » Maya Horowitz, vice president of research at Check Point, said in a statement shared with The Hacker News. « They can

,

A Turkish-speaking entity called Nitrokod has been attributed to an active cryptocurrency mining campaign that involves impersonating a desktop application for Google Translate to infect over 111,000 victims in 11 countries since 2019. 
« The malicious tools can be used by anyone, » Maya Horowitz, vice president of research at Check Point, said in a statement shared with The Hacker News. « They can

, ,
https://thehackernews.com/2022/08/nitrokod-crypto-miner-infected-over.html

A CISO’s Ultimate Security Validation Checklist

A CISO’s Ultimate Security Validation Checklist

,

If you’re heading out of the office on a well-deserved vacation, are you certain the security controls you have in place will let you rest easy while you’re away? More importantly – do you have the right action plan in place for a seamless return?
Whether you’re on the way out of – or back to – the office, our Security Validation Checklist can help make sure your security posture is in good

,

If you’re heading out of the office on a well-deserved vacation, are you certain the security controls you have in place will let you rest easy while you’re away? More importantly – do you have the right action plan in place for a seamless return?
Whether you’re on the way out of – or back to – the office, our Security Validation Checklist can help make sure your security posture is in good

, ,
https://thehackernews.com/2022/08/a-cisos-ultimate-security-validation.html

Twilio Breach Also Compromised Authy Two-Factor Accounts of Some Users

Twilio Breach Also Compromised Authy Two-Factor Accounts of Some Users,

Twilio, which earlier this month became a sophisticated phishing attack, disclosed last week that the threat actors also managed to gain access to the accounts of 93 individual users of its Authy two-factor authentication (2FA) service.
The communication tools company said the unauthorized access made it possible for the adversary to register additional devices to those accounts. It has since

,

Twilio, which earlier this month became a sophisticated phishing attack, disclosed last week that the threat actors also managed to gain access to the accounts of 93 individual users of its Authy two-factor authentication (2FA) service.
The communication tools company said the unauthorized access made it possible for the adversary to register additional devices to those accounts. It has since

, ,
https://thehackernews.com/2022/08/twilio-breach-also-compromised-authy.html

CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog

CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added 10 new actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, including a high-severity security flaw affecting industrial automation software from Delta Electronics.
The issue, tracked as CVE-2021-38406 (CVSS score: 7.8), impacts DOPSoft 2 versions 2.00.07 and prior. A successful

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added 10 new actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, including a high-severity security flaw affecting industrial automation software from Delta Electronics.
The issue, tracked as CVE-2021-38406 (CVSS score: 7.8), impacts DOPSoft 2 versions 2.00.07 and prior. A successful

, ,
https://thehackernews.com/2022/08/cisa-adds-10-new-known-actively.html

Désinstallez vite cette extension Chrome très populaire qui inonde votre PC de pubs

Désinstallez vite cette extension Chrome très populaire qui inonde votre PC de pubs,

,

Une fausse extension Chrome et Firefox d’un logiciel très populaire a été téléchargée plus de 200 000 fois. Il s’agit en fait d’un « adware » que l’on vous conseille de retirer immédiatement de votre navigateur web.

L’article Désinstallez vite cette extension Chrome très populaire qui inonde votre PC de pubs est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/desinstallez-vite-cette-extension-chrome-tres-populaire-qui-inonde-votre-pc-de-pubs.html

Certains policiers sont passés maîtres en fabrication de fausses preuves informatiques

Certains policiers sont passés maîtres en fabrication de fausses preuves informatiques,

,

SentinelOne

En Inde, des militants des droits de l’Homme ont été emprisonnés sur la base de faux documents déposés par des pirates. Les indices techniques récoltés par les chercheurs en sécurité de SentinelOne pointent… vers la police de la ville de Pune.

L’article Certains policiers sont passés maîtres en fabrication de fausses preuves informatiques est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/certains-policiers-sont-passes-maitres-en-fabrication-de-fausses-preuves-informatiques.html

Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations

Iranian Hackers Exploiting Unpatched Log4j 2 Bugs to Target Israeli Organizations,

Iranian state-sponsored actors are leaving no stone unturned to exploit unpatched systems running Log4j to target Israeli entities, indicating the vulnerability’s long tail for remediation.
Microsoft attributed the latest set of activities to the umbrella threat group tracked as MuddyWater (aka Cobalt Ulster, Mercury, Seedworm, or Static Kitten), which is linked to the Iranian intelligence

,

Iranian state-sponsored actors are leaving no stone unturned to exploit unpatched systems running Log4j to target Israeli entities, indicating the vulnerability’s long tail for remediation.
Microsoft attributed the latest set of activities to the umbrella threat group tracked as MuddyWater (aka Cobalt Ulster, Mercury, Seedworm, or Static Kitten), which is linked to the Iranian intelligence

, ,
https://thehackernews.com/2022/08/iranian-hackers-exploiting-unpatched.html

Critical Vulnerability Discovered in Atlassian Bitbucket Server and Data Center

Critical Vulnerability Discovered in Atlassian Bitbucket Server and Data Center,

Atlassian has rolled out fixes for a critical security flaw in Bitbucket Server and Data Center that could lead to the execution of malicious code on vulnerable installations.
Tracked as CVE-2022-36804 (CVSS score: 9.9), the issue has been characterized as a command injection vulnerability in multiple endpoints that could be exploited via specially crafted HTTP requests.

“An

,

Atlassian has rolled out fixes for a critical security flaw in Bitbucket Server and Data Center that could lead to the execution of malicious code on vulnerable installations.
Tracked as CVE-2022-36804 (CVSS score: 9.9), the issue has been characterized as a command injection vulnerability in multiple endpoints that could be exploited via specially crafted HTTP requests.

“An

, ,
https://thehackernews.com/2022/08/critical-vulnerability-discovered-in.html

Hackers Breach LastPass Developer System to Steal Source Code

Hackers Breach LastPass Developer System to Steal Source Code,

Password management service LastPass confirmed a security incident that resulted in the theft of certain source code and technical information.
The security breach is said to have occurred two weeks ago, targeting its development environment. No customer data or encrypted passwords were accessed.

“An unauthorized party gained access to portions of the LastPass development

,

Password management service LastPass confirmed a security incident that resulted in the theft of certain source code and technical information.
The security breach is said to have occurred two weeks ago, targeting its development environment. No customer data or encrypted passwords were accessed.

“An unauthorized party gained access to portions of the LastPass development

, ,
https://thehackernews.com/2022/08/hackers-breach-lastpass-developer.html