September 17, 2024 at 06:34AM Financial services organizations have suffered the highest number of DDoS attacks, nearly 3,000 in the first half of this year. The rise is attributed to factors like increased overall DDoS activity, surge in hacktivist actions, and emerging threats to APIs. The attacks have been extensive and politically motivated, particularly in … Read more
September 13, 2024 at 01:11PM Hackers are focusing on Oracle WebLogic servers to inject them with a new Linux malware called “Hadooken.” This malware initiates a cryptominer and a tool for distributed denial-of-service (DDoS) attacks. Based on the meeting notes, it is evident that there is a significant security concern related to hackers targeting Oracle … Read more
August 14, 2024 at 03:09AM The Gcore Radar Report for H1 2024 shows a 46% increase in DDoS attacks compared to the previous year, with the gaming industry most affected. Attack power has risen, and application-layer attacks pose risks to financial services and e-commerce. The report emphasizes the need for worldwide collaboration to minimize DDoS … Read more
July 22, 2024 at 08:11AM Two members of the Cyber Army of Russia Reborn (CARR) hacktivist crew, Yuliya Vladimirovna Pankratova and Denis Olegovich Degtyarenko, have been added to the US sanctions list for their alleged roles in attacks on US critical national infrastructure. These attacks included remote manipulation of controls and compromising SCADA systems. Other … Read more
July 14, 2024 at 11:37AM Cloudflare’s 2024 Application Security report highlights the rapid weaponization of proof-of-concept exploits, with attackers acting as quickly as 22 minutes after publication. The report identifies the most targeted CVEs, emphasizing the need for AI assistance to develop effective detection rules. Additionally, the report reveals a significant increase in DDoS traffic, … Read more
May 28, 2024 at 06:45AM CatDDoS botnet has exploited over 80 security flaws in the last three months to infect devices and launch DDoS attacks. It targets routers and networking equipment, mostly affecting devices from various vendors. The malware uses ChaCha20 encryption, employs an OpenNIC domain for C2, and shares encryption key/nonce pair with other … Read more
April 30, 2024 at 01:33PM A new threat actor called Muddling Meerkat, linked to the Chinese government, has been scanning DNS networks for years, manipulating DNS mail server records using fake responses. It can control the Great Firewall of China and may be preparing for cyberattacks. Admins are advised to eliminate open resolvers and use … Read more
April 17, 2024 at 09:09AM Six botnet malware operations target TP-Link Archer AX21 routers vulnerable to CVE-2023-1389, a high-severity command injection flaw. Discovered in January 2023, it was fixed by TP-Link in March 2023. Mirai variants, “Condi,” and botnets like Moobot and Miori exploit the vulnerability for DDoS attacks. Users are urged to update firmware … Read more
April 16, 2024 at 02:08AM As tensions rise in the Middle East, cyberattacks have become a norm in the geopolitical conflict. Israel faces cyber assaults from Iran and Hezbollah, potentially escalating due to ongoing military operations. Iran-linked groups may carry out destructive cyberattacks, while hacktivists show discontent with the situation. Hacktivism continues to fuel attacks … Read more
April 10, 2024 at 10:16AM Geopolitical instability drives a surge in distributed denial-of-service (DDoS) attacks, affecting global ISP networks, making the DDoS “tax” and increasing the cost for everyone. Cybercriminals exploit evolving attack vectors to target internet infrastructure. As attacks become more sophisticated, there’s a crucial need for comprehensive and adaptable DDoS protection solutions to … Read more