Recent Security News

  • Building cyber resilience with data vaults

    October 12, 2023 at 09:57AM Danish hosting subsidiaries CloudNordic and AzeroCloud experienced a serious ransomware attack in August 2023, resulting in complete encryption wipe-out and the loss of all customer data. The incident highlights the need for more effective backup and data resilience strategies to protect against ransomware attacks. Zerto offers a solution with continuous…

    Read More

  • Malicious NuGet Package Targeting .NET Developers with SeroXen RAT

    October 12, 2023 at 09:57AM A malicious package named Pathoschild.Stardew.Mod.Build.Config has been found on the NuGet package manager. It delivers a remote access trojan called SeroXen RAT. The package is a typosquat of a legitimate package and has artificially inflated its download count to over 100,000. The profile behind the package has published six other…

    Read More

  • ShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Servers

    October 12, 2023 at 09:57AM The ShellBot threat actors are using hexadecimal IP addresses to attack Linux SSH servers and deploy DDoS malware. The malware, also known as PerlBot, breaches servers with weak SSH credentials and then stages DDoS attacks and delivers cryptocurrency miners. The use of hexadecimal IP addresses is an attempt to avoid…

    Read More

  • Shadow PC warns of data breach as hacker tries to sell gamers’ info

    October 12, 2023 at 08:59AM Shadow PC, a cloud gaming service, has notified customers of a data breach resulting from a social engineering attack on an employee. An info-stealer malware was used to steal customer data, including names, email addresses, dates of birth, billing addresses, and credit card expiration dates. Shadow has revoked the stolen…

    Read More

  • Unpatched Vulnerabilities Expose Yifan Industrial Routers to Attacks

    October 12, 2023 at 07:39AM Chinese company Yifan’s industrial routers are vulnerable to critical security flaws, according to Cisco’s Talos. Yifan was given 90 days to release patches, but none have been issued. The flaws can allow attackers to execute arbitrary commands, change admin credentials, and access devices with admin privileges. All vulnerabilities can be…

    Read More