A new financially motivated threat, Nitrogen Ransomware, has rapidly emerged targeting the financial sector and beyond.  While traces of this financially motivated ransomware date back to July 2023, security experts primarily track its organized campaigns from September 2024. Nitrogen primarily targets organizations in construction, financial services, manufacturing, and technology sectors across the United States, Canada,...Read More

Concluding PartIn recent years, the definition of national security has expanded to include non-traditional threats such as climate change, pandemics, and cybersecurity, reflecting the growing interconnectedness of global risks. While some experts argue for a broader approach, others advocate for a more narrow focus to avoid diluting national security strategies and resources. This ongoing debate...Read More

Symantec recently reported that a China-based threat actor who has been involved in installing backdoors in the systems of target government institutions (i.e., cyber espionage) has turned toward spreading RA World ransomware (i.e., a cybercriminal act) this time. Going from one act to the other is not usual for attackers. Why did the researchers think...Read More

Hyderabad: In a major crackdown on cybercrime, the Telangana Cyber Security Bureau(TGCSB) arrested 20 individuals, including a relationship manager of DCB Bank’s Vapi branch, during a 10-day interstate operation in Surat, Gujarat. The operation, conducted between May 1 and 10 under the on-ground supervision of DSPs Phaneedra and Ranga Reddy, uncovered the involvement of the...Read More

Your CPU’s Microcode May Be The Next Target The discovery of UEFI ransomware in the ecosystem ruined a lot of people’s happiness.  The ability to infect your motherboard’s UEFI is an utter nightmare as the malware not only loads every time your system boots up, it exists in a place no traditional antivirus software can...Read More

A 45-year-old foreign citizen, internationally wanted for serious cybercrimes, has been apprehended in the Republic of Moldova following a coordinated operation between Moldovan and Dutch law enforcement agencies. The suspect is believed to be responsible for multiple ransomware attacks that caused millions of euros in damages to Dutch companies. The arrest comes as the result...Read More

The state’s Office of Information Technology is responding to a cybersecurity event that is affecting certain state systems. In a news release, Governor Kay Ivey’s office said immediate steps have been taken to contain the situation while working with a leading third-party cybersecurity firm to investigate, secure, and restore impacted services. “The event was first...Read More

Lee Enterprises said it incurred $2 million in restoration costs due to a major cybersecurity attack in February that also impacted second-quarter advertising revenue.  The Davenport, Iowa-based newspaper chain suffered major disruptions during the February attack, when hackers encrypted critical applications and stole data.  The company operates in 72 markets in 25 U.S. states, publishing...Read More

Bottom line: Chipmakers typically use microcode updates to fix bugs and improve CPU reliability. However, this low-level layer between hardware and machine code can also serve as a stealthy attack vector – capable of hiding malicious payloads from all software-based defenses. As threats evolve, even the deepest layers of a system can no longer be...Read More

A researcher from Rapid7 created a working Proof of Concept for a CPU ransomware Such a ransomware would persist on a device even after the hard drive had been replaced The PoC will (most likely) never see the light of day A security researcher wrote ransomware code that infects the computer’s CPU, making it invisible...Read More