But we mean, you've had nearly four years to patch

An advisory by CISA and multiple international cybersecurity agencies highlights the tactics, techniques, and procedures (TTPs) of APT40 (aka "Kryptonite Panda"), a state-sponsored Chinese cyber-espio...

Cyber threats are on the rise! Learn how ransomware attacks and vulnerabilities like ProxyLogon are causing data loss in Exchange Servers

But we mean, you've had nearly four years to patch

But we mean, you've had nearly four years to patch

edit Cyber CrimeTech Talk Crackdown on OSINT Platforms Using Leaked and Dark Web Data: Police and Central LEAs to Take Action NEW DELHI: Indian law enforcement agencies, including central intelligence units and cybercrime divisions, are gearing up for a major crackdown on OSINT (Open-Source Intelligence) platforms that are illicitly collecting, processing,… By Titiksha Srivastav April […]

A newly observed campaign tracked as StrikeShark is delivering the previously undocumented SharkLoader malware to deploy Cobalt Strike Beacon on compromised systems. The activity targets organizations across multiple countries and uses public exploit chains, malicious droppers, and DLL side-loading to gain access and maintain control. #StrikeShark #SharkLoader #CobaltStrikeBeacon #ProxyLogon #Openfire #GeoServer...

Read more

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

National Oil Ethiopia PLC (NOC) reportedly suffered a major data breach and ransomware attack after a threat actor detailed an eight-step intrusion on a hacker forum. The attacker says they exploited an Exchange ProxyLogon vulnerability to escalate privileges, disable Kaspersky, compromise Veeam backups, deploy ransomware, and exfiltrate four databases including an...

Threat actor ByteToBreach claims a full infrastructure takeover of National Oil Ethiopia PLC, achieving full Active Directory admin access and deploying ransomware after an 8-step intrusion. The actor alleges exfiltration of over 800 GB of data—including a 500 GB ERP database—and reports compromises of Veeam backup infrastructure and the Kaspersky security...

But we mean, you've had nearly four years to patch

Hackers attack Microsoft Exchange servers because they often contain sensitive communication data that can be exploited for several illicit

In this episode of “Story behind a cyberattack”, let’s talk about a cyberattack that shook the cybersecurity landscape in 2021. The attack that exposed the potential risks of unpatched systems and highlighted the important of cybersecurity practices.

Sécurité : L’Anssi a offert un premier décompte des serveurs Exchange exposés sur internet, dont certains sont vulnérables aux failles ProxyLogon. L’agence indique que le nombre déclaré de victimes d’attaques en France reste pour l’instant faible.

ToddyCat, a sophisticated cyber-espionage threat group also known as Websiic and Storm-0247, has emerged as a significant risk to organizations across Europe and Asia.