3 casos · pág. 1/1
A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…
ESET documented the evolution of MATCHBOIL, a custom C downloader used by the Russia-aligned cyberespionage group UAC-0099. Samples span April 2024 to April 2026, although CERT-UA first documented the malware in August 2025. Each iteration became more sophisticated, with new obfuscation, sandbox checks and persistence methods. All victims…
Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge certificates for any domain. A researcher credited as Wayne reported it on October…
