Ghost Ransomware Targets Orgs in 70+ Countries | Zero-Day Bug Pops Up in Parallels Desktop for Mac

Klicken Sie hier, um Informationweek.com zu abonnieren

Kategorien: Dienstleistungen | Professionals Geschäftswaren Finanziell Kantoor Marketing Einzelhandel Einzelhandel Industrie Machines Alter: 14 - 18 Jahr 19 - 30 Jahr 31 - 64 Jahre

Laden...

Vor 13 Stunden

Html
Text

The China-backed threat group often acts swiftly, going from initial access to compromise in just one day, a behavior atypical of cybercriminal groups.

Feb. 27, 2025

Signup

Weekly Edition

The latest news and insights for cybersecurity professionals

- The Latest News and Features -

Ghost Ransomware Targets Orgs in 70+ Countries ‎

The China-backed threat group often acts swiftly, going from initial access to compromise in just one day, a behavior atypical of cybercriminal groups.‎‎

Keep Reading →

Zero-Day Bug Pops Up in Parallels Desktop for Mac‎‎ A patch bypass for a bug in the popular desktop emulator enables root-level privilege escalation and has no fix in sight.‎‎

'Silver Fox' APT Skirts Windows Blocklist in BYOVD Attack‎‎ There's an untapped universe of exploitable drivers in the wild today. By exploiting just one of them, attackers were able to defeat security tools and infect Asian citizens with Gh0stRAT.‎‎

Max Severity RCE Vuln in All Versions of MITRE Caldera‎‎ In the wrong hands, the popular red-teaming tool can be made to access networks, escalate privileges, conduct reconnaissance, and disguise malicious activity as a simulated exercise.‎‎

Could the Plot of Netflix's 'Zero Day' Occur IRL?‎‎ A new streaming series about a catastrophic, nationwide cyberattack against US critical infrastructure is about as believable as its main character: an honest, bipartisan, universally beloved politician.‎‎

Black Basta Goes Dark Amid Infighting, Chat Leaks Show‎‎ One of 2024's most active ransomware outfits has been asleep through early 2025, thanks to reality-show-style, behind-the-scenes drama.‎‎

'Darcula' Phishing Kit Can Now Impersonate Any Brand‎‎ With Version 3, would-be phishers can cut and paste a big brand's URL into a template and let automation do the rest.‎‎

Microsoft 365 Accounts Get Sprayed by Mega-Botnet‎‎ The threat actors are exploiting noninteractive sign-ins, an authentication feature that security teams don't typically monitor.‎‎

North Korea's Lazarus Pulls Off Biggest Crypto Heist in History‎‎ Cyberattackers believed to be affiliated with the state-sponsored threat group pulled off the largest crypto heist reported to date, stealing $1.5 billion from exchange Bybit. It was carried out by interfering with a routine transfer between wallets.‎‎

DR TECHNOLOGY

Generative AI Shows Promise for Faster Triage of Vulnerabilities‎ A host of automated approaches identifies and remediates potential vulns while still retaining a role for security analysts to filter for context and business criticality.‎

THE EDGE

OpenSSF Sets Minimum Security Baselines for Open Source Projects‎ OSPS Baseline provides a starting point for project owners and adopters to understand an open source project's security posture by outlining all the controls that have been applied.‎

DR GLOBAL

Thailand Targets Cyber Sweatshops to Free 1,000s of Captives‎ Thai police said it was expecting to soon welcome 7,000 human trafficking victims, forced to work on cybercrime scams in call centers in Mynmar, in a first wave of people being freed from captivity.‎

VIRTUAL EVENT

Cybersecurity's Most Promising New and Emerging TechnologiesJoin us on March 20 for this all-day virtual event, designed to update cybersecurity teams on some of the most promising emerging cybersecurity technologies and provide advice on using them.

- Commentary -

Opinions from thought leaders around the cybersecurity industry

Unmanaged Devices: The Overlooked Threat CISOs Must Confront ‎

No matter the strategy, companies must approach securing unmanaged devices with sensitivity and respect for employee privacy.‎

Name That Toon: Ka-Ching! ‎

Feeling creative? Have something to say about cybersecurity? Submit your caption and our panel of experts will reward the winner with a $25 gift card.‎

More Commentary →

- Upcoming Events -

Feb 26, 2025

Unlocking the Power of PostgreSQL for Enterprise: Scalability, Security, and Performance in the Modern Sovereign and Hybrid Data Landscape

Feb 26, 2025

How CISOs Navigate the Regulatory and Compliance Maze

Aug 2, 2025

[Conference] Black Hat USA - August 2-7 - Learn More

More Events →

- More Resources -

WHITE PAPER

G2 Grid Report for Network Monitoring - Winter 2025