SEARCH
All Articles
Hardcoded Private Key Leads to Full Control of Some Siemens PLCs
A newly discovered flaw (CVE-2022-38465) in some Siemens S7 PLCs can allow an attacker to extract the hardcoded private key of the controller and gain complete control.
Caffeine: A ‘Readily Accessible’ Phishing-as-a-Service Platform
Researchers said a new phishing-as-a-service platform features an entirely open registration process that makes it easier for cybercriminals to leverage.
Q&A: Juan Andres Guerrero-Saade
Juan Andres Guerrero-Saade, senior director at SentinelLabs, discusses the newly discovered Metador APT group.
Log4j, ProxyLogon Among Top Flaws Exploited by Chinese Threat Groups
The NSA, FBI and CISA revealed the top CVEs exploited since 2020 by Chinese threat actors to gain initial access to sensitive networks.
Researchers Warn of Unpatched, Actively Exploited Zimbra Flaw
Zimbra has published mitigations against the actively exploited flaw (CVE-2022-41352) in Zimbra Collaboration Suite; however, it has yet to issue a fix.
Decipher Podcast: Source Code 10/7
Welcome back to Source Code, Decipher’s weekly news wrap podcast.
Decipher Podcast: Juan Andres Guerrero-Saade
Dennis Fisher talks with Juan Andres Guerrero-Saade, senior director at SentinelLabs, about the investigation into the new Metador APT group that he and his colleagues unveiled at LabsCon recently.
APTs Stole Sensitive Data From Defense Industrial Base Facility
The FBI, NSA and CISA are highlighting IoCs and TTPs used in an attack on a defense industrial base organization that leveraged compromised credentials, a custom data exfiltration tool and the Impacket open-source toolkit.
CISA Directive Aims to Help Federal Agencies Detect Flaws on Network
CISA hopes the new directive will improve and provide measurable processes for asset detection and vulnerability discovery across U.S. federal agencies.
Bumblebee Loader Evolves to Drop New Payloads
The Bumblebee malware loader is delivering separate payloads for different machines and using new evasion techniques.
Lazarus Group Exploited Dell Driver Flaw to Disable Windows Monitoring Features
Researchers said the Lazarus Group attacks were the first recorded abuse of the known Dell driver flaw (CVE-2021-21551) in the wild.
Attackers Exploiting Two Microsoft Exchange Zero Days
Attackers are exploiting two new Microsoft Exchange zero days ( CVE-2022-41040 and CVE-2022-41082) in the wild. Microsoft is working on a patch.
Decipher Podcast: Source Code 9/30
Welcome back to Source Code, Decipher's weekly security news podcast.
Threat Actor Delivered Malware Via Trojanized Live Chat Installer
The trojanized file was identified at organizations in the industrial, healthcare, technology, manufacturing, insurance and telecommunications sectors in North America and Europe, according to researchers.
Novel Malware Installed in VMware ESXi Attacks
Attackers used a unique tactic to install backdoors after compromising multiple organizations' VMware ESXi servers.