Tag: network
-
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by breaking into internet-facing networking devices.According to findings from Cisco Talos, UAT-7810 is an advanced persistent threat (APT) actor that’s responsible for maintaining and proliferating LapDogs, an ORB network that first came to light…
-
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched.The vulnerable code has shipped by default in essentially every mainstream distribution since 2011. The flaw needs no special permission, no unusual settings, and no network…
-
The 20 MSP acquires Sundance Networks, reaches 49 acquisitions
First seen on scworld.com Jump to article: www.scworld.com/brief/the-20-msp-acquires-sundance-networks-reaches-49-acquisitions
-
Reach Security launches network security assurance to find firewall and network misconfigurations
First seen on scworld.com Jump to article: www.scworld.com/brief/reach-security-launches-network-security-assurance-to-find-firewall-and-network-misconfigurations
-
Chinese hackers develop LONGLEASH malware to expand ORB network
Chinese hackers tracked as ‘UAT-7810’ are actively evolving their malware to expand their Operational Relay Box (ORB) network by compromising internet-facing networking devices, primarily unpatched Ruckus routers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chinese-hackers-develop-longleash-malware-to-expand-orb-network/
-
Spain Arrests Suspected Russian Hacktivist After FBI Tip
Investigators Say Suspect Supported CARR, Z-Pentest and NoName057(16). Spanish authorities, acting on FBI intelligence, arrested a man accused of supporting Cyber Army of Russia Reborn, Z-Pentest and NoName057(16), underscoring international efforts to dismantle Russian state-linked hacktivist networks targeting critical infrastructure. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/spain-arrests-suspected-russian-hacktivist-after-fbi-tip-a-32169
-
Spain Arrests Suspected Russian Hacktivist After FBI Tip
Investigators Say Suspect Supported CARR, Z-Pentest and NoName057(16). Spanish authorities, acting on FBI intelligence, arrested a man accused of supporting Cyber Army of Russia Reborn, Z-Pentest and NoName057(16), underscoring international efforts to dismantle Russian state-linked hacktivist networks targeting critical infrastructure. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/spain-arrests-suspected-russian-hacktivist-after-fbi-tip-a-32169
-
Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers
A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/
-
Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers
A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/
-
Businesses modernizing networks for AI fear expanding attack surface, limited visibility
IT leaders are worried that security controls aren’t keeping pace with threats to AI systems. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-network-expansion-security-concerns-cisco/824581/
-
Businesses modernizing networks for AI fear expanding attack surface, limited visibility
IT leaders are worried that security controls aren’t keeping pace with threats to AI systems. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-network-expansion-security-concerns-cisco/824581/
-
The 10 Hottest Cybersecurity Tools And Products Of 2026 (So Far)
The hottest cybersecurity products of 2026 so far include AI security tools from CrowdStrike, Palo Alto Networks, Zscaler and SentinelOne. First seen on crn.com Jump to article: www.crn.com/news/security/2026/the-10-hottest-cybersecurity-tools-and-products-of-2026-so-far
-
UAT-7810 continues building ORB networks using new malware
Talos’ latest findings on UAT-7810 indicate that the threat actor continues to develop their custom-made malware. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/uat-7810/
-
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices’ web management interfaces, the CERT Coordination Center (CERT/CC) warned Monday.”An attacker can exploit this vulnerability, tracked as CVE-2026-11405, to bypass the password verification process First seen on thehackernews.com…
-
Palo Alto Networks and Koi Security sued over alleged AI hallucinations in security report
First seen on scworld.com Jump to article: www.scworld.com/brief/palo-alto-networks-and-koi-security-sued-over-alleged-ai-hallucinations-in-security-report
-
Hackers Breach Sensitive DHS Information-Sharing Network
Hackers Breach DHS Network Used to Coordinate Major Event Security. Federal investigators are probing a breach of a sensitive DHS network that thousands of law enforcement and emergency officials use to coordinate security for major events, as a top senator warns the intrusion could carry national security consequences. First seen on govinfosecurity.com Jump to article:…
-
‘BusySnake’ Infostealer Slithers into Critical Infrastructure Networks
A threat group researchers call Armored Likho has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhstan. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/busysnake-infostealer-critical-infrastructure-networks
-
DHS Confirms Breach of Homeland Security Information Network
DHS confirmed a breach of the Homeland Security Information Network, an unclassified platform used for security and emergency coordination. The post DHS Confirms Breach of Homeland Security Information Network appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-dhs-hsin-breach-2026/
-
Go-Based Gentlemen Ransomware Uses PsExec, WMIC, and PowerShell Remoting for Network Propagation
Gentlemen, a Go-based ransomware-as-a-service (RaaS) active since mid-2025, has distinguished itself with a potent combination of modern cryptography, aggressive worm-like propagation, and a broad toolkit for remote execution. Operators offer the platform to affiliates, and recent recruitment ties to major breach forums appear to have expanded its reach since the affiliate program launch in late…
-
FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network
FBI and Google disrupt NetNut after domains linked to its residential proxy network are seized, exposing abuse of 2 million TVs and streaming devices worldwide. First seen on hackread.com Jump to article: hackread.com/fbi-seizes-netnut-domains-google-disrupts-proxy-network/
-
NetNut proxy network disrupted, 2 million infected devices cut off
A joint operation involving Google has disrupted NetNut, a residential proxy network that gave access to millions of compromised Android devices, including smart TVs and streaming boxes. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/netnut-proxy-network-disrupted-2-million-infected-devices-cut-off/
-
Law enforcememt operation disrupted Malicious Residential Proxy Networks NetNut
Google disrupted NetNut, a major proxy network that routed internet traffic through compromised home devices used by cybercriminals. Google has disrupted NetNut, one of the world’s largest residential proxy networks. The service routed internet traffic through home devices, allowing customers to hide their real location and identity. >>Today, in coordination with the FBI, Lumen, and…
-
FBI, Google Take Down NetNut Proxy Network Used by Cyber Threat Actors
The NetNut proxy network and the ‘Popa’ botnet are known to have infected devices with variants of Mirai DDoS botnets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fbi-google-take-down-netnut-proxy/
-
Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices
Google has significantly degraded NetNut, one of the biggest networks that turns home devices into rented relays for other people’s traffic.Working with the FBI, Lumen, and others, Google’s Threat Intelligence Group (GTIG) said this week it had reduced the network’s pool of usable devices by millions.Google identifies NetNut, also tracked as Popa, as a network…
-
US government says it got hacked, again
A top Democrat on the Senate’s Intelligence Committee warned that the information accessed on a Homeland Security intelligence-sharing network may risk national security. First seen on techcrunch.com Jump to article: techcrunch.com/2026/07/02/us-government-says-it-got-hacked-again/
-
Cyberphysische-Sicherheitsplattform um innovative Funktionen zur Mikrosegmentierung erweitert
Der Spezialist für die Sicherheit von cyberphysischen Systemen (CPS), Claroty, baut das ‘Claroty Technology Alliances Program” (CTAP) weiter aus: Mit neuen Partnern wie Akamai, Colortokens, Corsha, Elisity und Zero Networks wird die CPS-Sicherheitsplattform um innovative Funktionen zur Mikrosegmentierung erweitert. So wird die Widerstandsfähigkeit von kritischen Infrastrukturen erheblich verbessert. Laut Gartner ist Mikrosegmentierung ‘in kritischen Infrastrukturen…
-
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
Tags: ai, attack, credentials, exploit, jobs, network, ransomware, rce, remote-code-execution, threatSecurity firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent.Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper into the network, then encrypting and wiping a…
-
Catching ransomware on the wire before it locks the file server
Corporate networks keep sensitive files off individual workstations and store them on shared servers that staff reach through mapped network drives. That arrangement hands … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/02/shared-storage-ransomware-detection-research/
-
MeetingTV Sues Palo Alto Networks Over Koi Threat Report
Tags: ai, china, cybercrime, cybersecurity, infrastructure, intelligence, malware, network, threat, toolMeetingTV Says Koi’s AI Analysis Tool Wrongly Tied it to Malware Infrastructure. MeetingTV alleges an AI-assisted threat intelligence report published by Koi Security falsely linked its infrastructure to a Chinese cybercrime operation, while Koi parent Palo Alto Networks argues the report reflects protected cybersecurity analysis rather than actionable false statements. First seen on govinfosecurity.com Jump…