APT actors exploit legacy internet-facing vulnerabilities in combination with Zerologon to target organizations

Advanced persistent threat actors (APTs) are exploiting multiple legacy vulnerabilities in combination with newer "Zerologon" to target government networks, critical infrastructure, and elections organizations.

Continue Reading APT actors exploit legacy internet-facing vulnerabilities in combination with Zerologon to target organizations

BeagleBoyz cybercriminals launch “FASTCash 2.0” to rob banks

North Korea's BeagleBoyz cybercriminals have launched an automated teller machine (ATM) cash-out scheme, known as FASTCash 2.0. Cyber experts from the U.S. government have detected the cyber activity over the past five years that led to nearly $2B loss to financial institutions around the world.

Continue Reading BeagleBoyz cybercriminals launch “FASTCash 2.0” to rob banks

FBI and CISA warning of Chinese targeting COVID-19 research organizations

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) issued a warning of likely targeting and compromise of U.S. COVID-19 research organizations by the People’s Republic of China (PRC).

Continue Reading FBI and CISA warning of Chinese targeting COVID-19 research organizations

Alert: Threat actors continue to exploit patched Pulse Secure VPN devices

Organizations that are running Pulse Security VPN devices may still be at risk of being exploited, even if previously patched, according to a new Department of Homeland Security (DHS) advisory. The risk is elevated if an actor previously exploited CVE-2019-11510 and stole AD credentials from the victim organization.

Continue Reading Alert: Threat actors continue to exploit patched Pulse Secure VPN devices