The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved seizing control over the botnet's online infrastructure, and quietly removing the Qakbot malware from tens of thousands of infected Microsoft Windows computers. READ MORE...
The University of Michigan has taken all of its systems and services offline to deal with a cybersecurity incident, causing a widespread impact on online services the night before classes started. University of Michigan (U-M) is one of the oldest and largest educational institutes in the United States, employing over 30,000 academic and administrative staff and having roughly 51,000 students. READ MORE...
Japan's National Center of Incident Readiness and Strategy for Cybersecurity (NISC), the agency responsible for the nation's defences against cyber attacks, has itself been hacked. As the Financial Times reports, the Chinese military are suspected of being behind a security breach that saw hackers infiltrate Japan's NISC for as long as nine months. At the start of this month, on August 4 2023, Japan's NISC went public about a security breach that had resulted in email conversations being exposed. READ MORE...
Citrix NetScaler ADC and NetScaler Gateway are at heightened risk of opportunistic attacks by a ransomware group likely linked to the financially motivated FIN8 threat actor. The critical code injection vulnerability is being tracked as CVE-2023-3519 and affects multiple versions of Citrix' application delivery, load balancing, and remote access technologies. READ MORE...
A serious flaw affecting several major Border Gateway Protocol (BGP) implementations can be exploited to cause prolonged internet outages, but some vendors are not patching it, a researcher warned on Tuesday. The issue was discovered by Ben Cox, the owner of BGP.Tools, a company that provides monitoring services to help organizations quickly identify and address BGP-related issues. READ MORE...
In an FBI Flash about a Barracuda ESG vulnerability, listed as CVE-2023-2868, the FBI has stated that the patches released by Barracuda in response to this CVE were ineffective for anyone previously infected. Although both Barracude and Mandiant have already made this determination, the agency says it has "independently verified" it. As we explained in an earlier post, the zero-day vulnerability was reportedly used in targeted attacks for months before the patch was issued. READ MORE...