Threat actors are exploiting a recently patched vulnerability in Palo Alto’s firewall software, leading to concerns over network security. Ransomware-as-a-service (RaaS) group BlackLock is emerging prominently in the ransomware space. Security issues have also been noted with Ivanti, MacOS, and Myanmar scam compounds. Meanwhile, SEC has rebranded its Cyber Assets and Cyber Unit, Lee Enterprises is recovering from a ransomware attack, and Insight Partners has disclosed a cyber incident, while Black Basta chat logs have been leaked.
North Korean Hackers Use ZIP Files to Deploy Malicious PowerShell Scripts
North Korean state-sponsored hackers, known as APT37 or ScarCruft, are leveraging malicious ZIP files in phishing emails to start multi-stage cyber attacks. The malicious files,
