Brazilian cybercriminals are using the original version of the XPan ransomware, targeting small to medium-sized business based in Brazil with the malware.
xDedic Market Spilling Over With School Servers, PCs
Nearly two-thirds of servers and PCs peddled on the xDedic underground marketplace belong to schools and universities based in United States.
Locky Ransomware Roars Back to Life Via Necurs Botnet
The first large scale Locky campaign in months has been detected via the Necurs botnet.
NSA’s DoublePulsar Kernel Exploit In Use Internet-Wide
Scans show tens of thousands of Windows servers infected with the DoublePulsar kernel exploit leaked by the ShadowBrokers two weeks ago.
Mirai and Hajime Locked Into IoT Botnet Battle
A white hat hacker is believed responsible for the Hajime IoT botnet because its main objective appears to be to secure IoT devices vulnerable to the notorious Mirai malware.
20 Linksys Router Models Vulnerable To Attack
Researchers say more than 100,000 Linksys routers in use today could be vulnerable to 10 flaws found in 20 separate router models made by the company.
Patched Flaw in Bosch Diagnostic Dongle Allowed Researchers to Shut Off Engine
Two vulnerabilities were identified in Bosch’s Drivelog Connect OBD-II dongle and smartphone app that allowed researchers to shut off the engine of a vehicle.
ShadowBrokers’ Windows Zero-Days Already Patched
Microsoft eased some anxiety over the latest ShadowBrokers dump of Windows zero days with news most of the vulnerabilities had already been patched.
Wave of Java-Based RATs Target Tax Filers
A rash of Java-based remote access Trojans is targeting tax filers with bogus IRS attachments.
ShadowBrokers Expose NSA Access to SWIFT Service Bureaus
The latest ShadowBrokers dump includes exploits that allowed the NSA to target SWIFT data managed by outsourced service bureaus in the Middle East.