Subaru Starlink Vulnerability Exposed Cars to Remote Hacking
Summary: Security researchers Sam Curry and Shubham Shah found flaws in Subaru’s employee-facing STARLINK administration portal that co...
FBI: North Korean IT worker scheme involves source code theft, extortion
Summary: The FBI warned U.S. organizations that fraudulent North Korean IT workers are stealing source code and other sensitive data, t...
Cloud-targeted attacks conducted by TRIPLESTRENGTH operation
Summary: Google Cloud’s Threat Horizons research described TRIPLESTRENGTH, a financially motivated operation that combined cloud accoun...
New Trump AI order pursues new action plan
Summary: President Donald Trump signed an executive order on January 23, 2025 directing the U.S. government to prepare a national artif...
Enterprise Juniper routers subjected to malware campaign
Summary: Black Lotus Labs documented a campaign called J-Magic that placed a custom backdoor on enterprise Juniper routers and waited f...
More robust BC malware with QBot ties emerges
Summary: Security researchers described a more capable BackConnect malware family associated with the QBot ecosystem. The tool gives op...
Most online Exchange Servers vulnerable to ProxyLogon still not remediated
Summary: Tenable reported in January 2025 that 91% of nearly 30,000 internet-facing Microsoft Exchange Server instances it identified a...
HellCat, Morpheus RaaS operations leverage similar payloads
SentinelOne researchers analyzing the HellCat and Morpheus ransomware-as-a-service operations found payloads with almost identical code...
INC Ransom takes responsibility for Stark Aerospace compromise
The INC Ransom group claimed that it compromised Stark Aerospace, a Mississippi-based manufacturer serving the aerospace and defense se...
Ransomware attacks peaked in December
NCC Group recorded 574 ransomware victims in December 2024, the highest monthly total observed since the company began tracking ransomw...