Cring ransomware operators are exploiting an old path traversal vulnerability in the FortiOS SSL VPN web portal to gain access to enterprise networks, Kaspersky warns.
AA20-302A: Ransomware Activity Targeting the Healthcare and Public Health Sector
vom 362.63 Punkte
Original release date: October 28, 2020SummaryThis advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 7 framework. See the ATT&CK for Enterprise version 7 for all referenced threat actor tactics and techniques.
This joint cybersecurity
AA20-352A: Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations
vom 302.35 Punkte
Original release date: December 17, 2020<br/><h3>Summary</h3><p class="tip-intro" style="font-size: 15px;"><em>This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 8 framework.
AA20-301A: North Korean Advanced Persistent Threat Focus: Kimsuky
vom 245.83 Punkte
Original release date: October 27, 2020SummaryThis advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) version 7 framework. See the ATT&CK for Enterprise version 7 for all referenced threat actor tactics and techniques.
This joint cybersecurity
AA20-099A: COVID-19 Exploited by Malicious Cyber Actors
vom 221.67 Punkte
Original release date: April 8, 2020SummaryThis is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC).
This al
AA20-099A: COVID-19 Exploited by Malicious Cyber Actors
vom 221.67 Punkte
Original release date: April 8, 2020SummaryThis is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC).
This al
TA18-074A: Russian Government Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors
vom 188.31 Punkte
Original release date: March 15, 2018Systems Affected
Domain ControllersFile ServersEmail ServersOverview
This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bu
TA17-293A: Advanced Persistent Threat Activity Targeting Energy and Other Critical Infrastructure Sectors
vom 180.68 Punkte
Original release date: October 20, 2017 | Last revised: October 23, 2017Systems Affected
Domain ControllersFile ServersEmail ServersOverview
This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Secur
New Cring ransomware deployed targeting unpatched Fortinet VPN devices
vom 178.28 Punkte
Attackers are actively exploiting the CVE-2018-13379 flaw in Fortinet VPN to deploy the Cring ransomware to organizations in the industrial sector. Threat actors are actively exploiting the CVE-2018-13379 vulnerability in Fortinet VPNs to deploy a ne
Energy Sector Most Impacted by ICS Flaws, Attacks: Study
vom 135.99 Punkte
The energy sector was targeted by cyberattacks more than any other industry, and many of the vulnerabilities disclosed last year impacted products used in this sector, according to a report published on Monday by Kaspersky Lab.
The security firm has analyzed a total of 322 flaws disclosed in 201
Energy Sector Most Impacted by ICS Flaws, Attacks: Study
vom 135.99 Punkte
The energy sector was targeted by cyberattacks more than any other industry, and many of the vulnerabilities disclosed last year impacted products used in this sector, according to a report published on Monday by Kaspersky Lab.
The security firm has analyzed a total of 322 flaws disclosed in 201
Cring Ransomware spreading because of Fortinet vulnerability
vom 127.92 Punkte
European Enterprises mainly involved in manufacturing are being targeted by a new strain of Ransomware dubbed as Cring and confirmed sources say that the malware is being spread by exploitation of Fortinet VPN Vulnerability. Security researchers from Ka
Cring Ransomware Targets Industrial Organizations
vom 125.31 Punkte
Cring ransomware operators are exploiting an old path traversal vulnerability in the FortiOS SSL VPN web portal to gain access to enterprise networks, Kaspersky warns.
read more
