Experimental News Clipping Site

Tag: ransomware

  • Cisco Talos Blog: Velociraptor leveraged in ransomware attacks

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.talosintelligence.com/velociraptor-leveraged-in-ransomware-attacks/ Source: Cisco Talos Blog Title: Velociraptor leveraged in ransomware attacks Feedly Summary: Cisco Talos has confirmed that ransomware operators are leveraging Velociraptor, an open-source digital forensics and incident response (DFIR) tool that had not previously been definitively tied to ransomware incidents.  We assess with moderate confidence that this activity can be attributed to…

  • Slashdot: Teens Arrested In London Preschool Ransomware Attack

    —

    by

    Kurt Seifried
    in

    Source URL: https://yro.slashdot.org/story/25/10/08/2020255/teens-arrested-in-london-preschool-ransomware-attack?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Teens Arrested In London Preschool Ransomware Attack Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant incident involving the arrest of two teenagers related to a ransomware attack on a chain of preschools in London. This case highlights critical issues around cybersecurity, particularly in the…

  • The Register: Microsoft blames Medusa ransomware affiliates for GoAnywhere exploits while Fortra keeps head buried

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/10/06/microsoft_blames_medusa_ransomware_affiliates/ Source: The Register Title: Microsoft blames Medusa ransomware affiliates for GoAnywhere exploits while Fortra keeps head buried Feedly Summary: You can’t find anything bad if you don’t look, right? Medusa ransomware affiliates are among those exploiting a maximum-severity bug in Fortra’s GoAnywhere managed file transfer (MFT) product, according to Microsoft Threat Intelligence.……

  • Microsoft Security Blog: Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/10/06/investigating-active-exploitation-of-cve-2025-10035-goanywhere-managed-file-transfer-vulnerability/ Source: Microsoft Security Blog Title: Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability Feedly Summary: Storm-1175, a financially motivated actor known for deploying Medusa ransomware and exploiting public-facing applications for initial access, was observed exploiting the deserialization vulnerability in GoAnywhere MFT’s License Servlet, tracked as CVE-2025-10035. We are publishing this…

  • The Register: Clop crew hits Oracle E-Business Suite users with fresh zero-day

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/10/06/clop_oracle_ebs_zeroday/ Source: The Register Title: Clop crew hits Oracle E-Business Suite users with fresh zero-day Feedly Summary: Big Red rushes out patch for 9.8-rated flaw after crooks exploit it for data theft and extortion Oracle rushed out an emergency fix over the weekend for a zero-day vulnerability in its E-Business Suite (EBS) that…

  • Slashdot: Google Says Hackers Are Sending Extortion Emails To Executives

    —

    by

    Kurt Seifried
    in

    Source URL: https://tech.slashdot.org/story/25/10/02/1812256/google-says-hackers-are-sending-extortion-emails-to-executives?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Says Hackers Are Sending Extortion Emails To Executives Feedly Summary: AI Summary and Description: Yes Summary: Google has reported that hackers associated with the ransomware group cl0p are sending extortion emails to executives, threatening the release of stolen sensitive data from Oracle business applications. The authenticity of these…

  • The Register: Clop-linked crims shake down Oracle execs with data theft claims

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/10/02/clop_oracle_extortion/ Source: The Register Title: Clop-linked crims shake down Oracle execs with data theft claims Feedly Summary: Extortion emails name-drop Big Red’s E-Business Suite, though Google and Mandiant yet to find proof of any breach Criminals with potential links to the notorious Clop ransomware mob are bombarding Oracle execs with extortion emails, claiming…

  • The Register: Google bolts AI into Drive to catch ransomware, but crooks not shaking yet

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/09/30/google_drive_ai_ransomware_detection/ Source: The Register Title: Google bolts AI into Drive to catch ransomware, but crooks not shaking yet Feedly Summary: Stopping the spread isn’t the same as stopping attacks, period Google on Tuesday rolled out a new AI tool in Drive for desktop that it says will pause syncing to limit ransomware damage,…