A Zebra in Gopher’s Clothing: Russian APT Uses COVID-19 Lures to Deliver Zebrocy intezer.com/blog/research/…
On Dec. 7, 2020, the National Security Agency (NSA) published a cybersecurity advisory indicating they observed Russian state-sponsored actors exploiting a VMware command injection vulnerability (CVE-2020-4006) | unit42.paloaltonetworks.com/cve-2020-4006/
Russian State-Sponsored Actors Exploiting Vulnerability in VMware Workspace ONE Access Using Compromised Credentials | media.defense.gov/2020/Dec/07/20…
Cyberattacks targeting health care must stop -- The attacks came from Strontium, an actor originating from Russia, and two actors originating from North Korea that we call Zinc and Cerium. blogs.microsoft.com/on-the-issues/…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
“The compromise of SolarWinds’ Orion Network Management Products poses unacceptable risks to the security of federal networks,” said CISA Acting Director Brandon Wales. cisa.gov/news/2020/12/1…
“The compromise of SolarWinds’ Orion Network Management Products poses unacceptable risks to the security of federal networks,” said CISA Acting Director Brandon Wales. | Mitigate SolarWinds Orion Code Compromise (CISA): cyber.dhs.gov/ed/21-01/
FireEye discovered a supply chain attack trojanizing SolarWinds Orion business software updates in order to distribute malware we call SUNBURST | fireeye.com/blog/threat-re…