The P2Pinfect worm targeting Redis servers has been updated with ransomware and cryptocurrency mining payloads.

The post P2Pinfect Worm Now Dropping Ransomware on Redis Servers appeared first on SecurityWeek.

A Mirai-like botnet has started exploiting a critical-severity vulnerability in discontinued Zyxel NAS products.

The post Recent Zyxel NAS Vulnerability Exploited by Botnet appeared first on SecurityWeek.

A years-long espionage campaign has targeted telecoms companies in Asia with tools associated with Chinese groups.

The post Cyber Assault on Asian Telecoms Traced to Chinese State Hackers appeared first on SecurityWeek.

A threat actor targeting Chinese-speaking victims has been using the SquidLoader malware loader in recent attacks.

The post Highly Evasive SquidLoader Malware Targets China appeared first on SecurityWeek.

A statewide outage of the Massachusetts 911 system was the result of a firewall that blocked calls from reaching emergency responders.

The post Massachusetts 911 Outage Caused by Errant Firewall appeared first on SecurityWeek.

The BadSpace backdoor is being distributed via drive-by attacks involving infected websites and JavaScript downloaders.

The post New BadSpace Backdoor Deployed in Drive-By Attacks appeared first on SecurityWeek.

China-linked threat actor Velvet Ant leveraged a legacy F5 BIG-IP appliance for three-year access to a victim’s network.

The post Chinese Hackers Leveraged Legacy F5 BIG-IP Appliance for Persistence appeared first on SecurityWeek.

Security researchers at Cisco Talos and Volexity flag two Pakistani espionage campaigns targeting Indian government entities.

The post Pakistani Threat Actors Caught Targeting Indian Gov Entities appeared first on SecurityWeek.

CISA urges federal agencies to apply mitigations for an exploited Progress Telerik vulnerability as soon as possible.

The post CISA Warns of Progress Telerik Vulnerability Exploitation appeared first on SecurityWeek.

The zero-day is tagged as CVE-2024-32896 and described as an elevation of privilege issue in Pixel Firmware.

The post Google Warns of Pixel Firmware Zero-Day Under Limited, Targeted Exploitation appeared first on SecurityWeek.

The Windows vulnerability carries a CVSS severity score of 9.8/10 and can be exploited by via specially crafted malicious MSMQ packets.

The post Patch Tuesday: Remote Code Execution Flaw in Microsoft Message Queuing appeared first on SecurityWeek.

Patch Tuesday: Adobe fixes critical flaws and warns of the risk of code execution attacks on Windows and macOS platforms.

The post Adobe Plugs Code Execution Holes in After Effects, Illustrator appeared first on SecurityWeek.

Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.

The post Arm Warns of Exploited Kernel Driver Vulnerability appeared first on SecurityWeek.

Akamai warns that a Chinese threat actor is exploiting years-old remote code execution vulnerabilities in ThinkPHP in new attacks.

The post Chinese Hackers Exploit Old ThinkPHP Vulnerabilities in New Attacks appeared first on SecurityWeek.

Google and Microsoft warn of elevated risks of cyber threats facing the 2024 Paris Olympics, especially from Russian threat actors.

The post Google, Microsoft: Russian Threat Actors Pose High Risk to 2024 Paris Olympics appeared first on SecurityWeek.

Multiple Chinese state-sponsored groups have targeted a Southeast Asian government in a years-long cyberespionage campaign.

The post Multiple Chinese APTs Targeted Southeast Asian Government for Two Years appeared first on SecurityWeek.

Cybersecurity researchers are demonstrating how malware could steal data collected by the new Windows Recall feature.

The post Researchers Show How Malware Could Steal Windows Recall Data appeared first on SecurityWeek.

CISA has added an old Oracle WebLogic flaw tracked as CVE-2017-3506 to its known exploited vulnerabilities catalog.

The post CISA Warns of Attacks Exploiting Old Oracle WebLogic Vulnerability appeared first on SecurityWeek.

Law enforcement reveals the identities of eight cybercriminals linked to recently disrupted malware loaders.

The post Identities of Cybercriminals Linked to Malware Loaders Revealed appeared first on SecurityWeek.

PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances.

The post PoC Published for Exploited Check Point VPN Vulnerability appeared first on SecurityWeek.

Over 600,000 SOHO routers belonging to a single ISP and infected with the Chalubo trojan were rendered inoperable.

The post Mysterious Threat Actor Used Chalubo Malware to Brick 600,000 Routers appeared first on SecurityWeek.

Malicious campaign exploits high-severity XSS flaws in three WordPress plugins to backdoor websites.

The post Critical WordPress Plugin Flaws Exploited to Inject Malicious Scripts and Backdoors appeared first on SecurityWeek.

The TrickBot botnet and other malware droppers have been targeted by international law enforcement in Operation Endgame.

The post TrickBot and Other Malware Droppers Disrupted by Law Enforcement appeared first on SecurityWeek.

Okta raises the alarm on credential stuffing attacks targeting endpoints used for cross-origin authentication.

The post Okta Warns of Credential Stuffing Attacks Targeting Cross-Origin Authentication appeared first on SecurityWeek.

The US announced that the 911 S5 (Cloud Router) botnet, likely the world’s largest, has been dismantled and its administrator arrested.

The post Massive 911 S5 Botnet Dismantled, Chinese Mastermind Arrested appeared first on SecurityWeek.

The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.

The post Check Point VPN Attacks Involve Zero-Day Exploited Since April appeared first on SecurityWeek.

Backdoored JAVS courtroom recording and management software installer puts thousands at risk of complete takeover.

The post JAVS Courtroom Audio-Visual Software Installer Serves Backdoor appeared first on SecurityWeek.