Cybersecurity

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing” – Sophos News

Sophos X-Ops’ Managed Detection and Response (MDR) is actively responding to incidents tied to two separate groups of threat actors, each of which have...

A closer look at the Mercedes-Benz infotainment system security

Introduction This report covers the research of the Mercedes-Benz Head Unit, which was made by our team. Mercedes-Benz’s latest Head Unit (infotainment system) is called...

[Guest Diary] How Access Brokers Maintain Persistence

program] Access brokers are groups referred to that obtain initial access in compromised environments, establish persistence through different methods, and sell this access to...

MasterCard DNS Error Went Unnoticed for Years – Krebs on Security

The payment card giant MasterCard just fixed a glaring error in its domain name server settings that could have allowed anyone to intercept or...

Half a million hotel guests at risk after hackers accessed sensitive data

The personal information of almost half a million people is now in the hands of hackers after a security breach of a company used...

Tornado – Darknet Diaries

Full Transcript In this episode, Geoff White (https://x.com/geoffwhite247) tells us what happened to Axie Infinity and Tornado cash. It’s a digital...

Defending your personal data from dark web criminals

Cybercrime You may not always stop your personal information from ending up in...

Experimenting with Stealer Logs in Have I Been Pwned

TL;DR — Email addresses in stealer logs can now be queried in HIBP...

Gootloader inside out – Sophos News

... That hidden element had links (selected with green) and the matching targeted search terms (selected with brown): This hidden element will not be visible to...

Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation

Jan 17, 2025Ravie LakshmananFirmware Security / Vulnerability Cybersecurity researchers have disclosed three security flaws in Planet Technology's WGS-804HPT industrial switches that could be chained to...

Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campaign – Sophos News

Once used exclusively by the cybercriminals behind REVil ransomware and the Gootkit banking trojan, GootLoader and its primary payload have evolved into an initial...

The EAGERBEE backdoor may be related to the CoughingDown actor

Introduction In our recent investigation into the EAGERBEE backdoor, we found that it was being deployed at ISPs and governmental entities in the Middle East....

Recent articles