CERT Polska
Warnings and incidents · Poland
Source digest
Cybersecurity — Poland and the world
Latest publications from Polish and international security outlets and response teams: threat warnings, vulnerabilities, regulatory changes, campaigns abroad, technical analyses and guides. Every entry gives a title, a short summary and a link to the publisher’s full article.
Search titles and summaries, or narrow the digest to a single category, outlet or region. The numbers in brackets show how many entries remain once a value is selected.
-
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, and religious institutions in Southeast Asia, the FBI and agencies in 6 other countries said on October 8. The company…
-
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
Cyber-espionage actor UAC-0099 has been steadily refining its flagship dropper in campaigns targeting Ukrainian organizations.
-
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere, an attacker left a server exposed, complete with tools and traces of an intrusion. Apparently, keeping things secure is a problem on both…
-
FakeGit malware campaign returns with 17,610 malicious GitHub repos
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer. [...]
-
DOJ charges ransomware recovery CEO for secretly paying hackers
The owner of a ransomware recovery firm was hit with wire fraud charges for allegedly making secret ransom payments while overcharging the victims of attacks.
-
The Record World Cyber conflict and states 11 days ago
ASOS: Hackers tricked way into employee account before sending rogue push notification
The company said its investigation, carried out with external experts, found the attackers had accessed “some personal information, including names and contact details, and certain non-personal account related information.”
-
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Tokyo-based center, which takes incident reports, based its…
-
Crypto thief who splurged on gold grills sentenced in London
A 25-year-old man who helped steal nearly $260,000 in cryptocurrency through a SIM-swapping fraud scheme was sentenced to two and a half years in prison at a London court.
-
Cisco Patches a Dozen Critical Vulnerabilities
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution. The post Cisco Patches a Dozen Critical Vulnerabilities appeared first on SecurityWeek.
-
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to TrendAI, the malware has been put to use in attacks targeting Ukrainian…
Page 37 of 60 · 599 entries in the archive
Entries stay here even after they drop out of the publishers’ RSS feeds. The links point to the originals — if a publisher removes an article, its link stops working.
Where the entries come from
Tracked sources
Niebezpiecznik
Everyday security · Poland
Zaufana Trzecia Strona
Analyses and investigations · Poland
Sekurak
Technique and vulnerabilities · Poland
CyberDefence24
Policy and regulation · Poland
Kapitan Hack
Threats to business · Poland
The Hacker News
Campaigns and vulnerabilities · World
BleepingComputer
Incidents and malware · World
Krebs on Security
Investigative journalism · World
The Record
Cyber conflict and states · World
Dark Reading
Industry analysis · World
SecurityWeek
Enterprise security · World
Schneier on Security
Cryptography and policy · World
EvidSec does not publish these materials and does not store their content. We show only the title, a short summary taken from the publisher’s RSS feed and a link to the original article. All rights belong to their authors and publishers.
The “Machine translation” link opens the publisher’s article through an external machine-translation service. The text is translated automatically, so errors, distortions and wrong terminology are possible — the original version always prevails. EvidSec does not translate these texts itself and does not store their content.