Russian ransomware affiliate charged with attacks on critical infrastructure


The U.S. Justice Department has filed charges against a Russian citizen named Mikhail Pavlovich Matveev (also known as Wazawaka or Boriselcin) for involvement in three ransomware operations that targeted victims across the United States. [...]


https://www.bleepingcomputer.com/news/se...structure/

Hackers infect TP-Link router firmware to attack EU entities


A Chinese state-sponsored hacking group named "Camaro Dragon" infects residential TP-Link routers with a custom "Horse Shell" malware used to attack European foreign affairs organizations. [...]


https://www.bleepingcomputer.com/news/se...-entities/

Apple blocked 1.7 million apps for privacy, security issues in 2022


Apple's App Store team prevented more than $2 billion in transactions tagged as potentially fraudulent and blocked almost 1.7 million app submissions for privacy, security, and content policy violations in 2022. [...]


https://www.bleepingcomputer.com/news/ap...s-in-2022/

GitHub reveals reason behind last week’s string of outages


GitHub's Chief Security Officer and SVP of Engineering shared more details today on a string of outages that hit the code hosting platform last week. [...]


https://www.bleepingcomputer.com/news/te...f-outages/

Microsoft investigates slow Windows VPN speeds after May updates


Microsoft is investigating major speed issues affecting L2TP/IPsec VPN connections after installing recent Windows 11 updates. [...]


https://www.bleepingcomputer.com/news/mi...y-updates/

New ZIP domains spark debate among cybersecurity experts


Cybersecurity researchers and IT admins have raised concerns over Google's new ZIP and MOV Internet domains, warning that threat actors could use them for phishing attacks and malware delivery. [...]


https://www.bleepingcomputer.com/news/se...y-experts/

Hackers use Azure Serial Console for stealthy access to VMs


A financially motivated cybergang tracked by Mandiant as 'UNC3944' is using phishing and SIM swapping attacks to hijack Microsoft Azure admin accounts and gain access to virtual machines. [...]


https://www.bleepingcomputer.com/news/se...ss-to-vms/

FBI confirms BianLian ransomware switch to extortion only attacks


The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and Australian Cyber Security Centre (ACSC) have published a joint advisory to inform organizations of the latest tactics, techniques, and procedures (TTPs) and known indicators of compromise (IOCs) of the BianLian ransomware group. [...]


https://www.bleepingcomputer.com/news/se...y-attacks/

ScanSource says ransomware attack behind multi-day outages


Technology provider ScanSource has announced it has fallen victim to a ransomware attack impacting some of its systems, business operations, and customer portals. [...]


https://www.bleepingcomputer.com/news/se...y-outages/

Malicious Microsoft VSCode extensions steal passwords, open remote shells

Cybercriminals are starting to target Microsoft's VSCode Marketplace, uploading three malicious Visual Studio extensions that Windows developers downloaded 46,600 times. [...]


https://www.bleepingcomputer.com/news/se...te-shells/