• Skip to primary navigation
  • Skip to main content
GreyKeep Security logo

GreyKeep Security

Expert security for an evolving digital age

  • Services
  • Our Approach
  • Blog
  • About
  • Contact Us
  • Show Search
Hide Search

Malware

Weekly Malware Roundup – August 29, 2023

greykeep · August 29, 2023 ·

GreyKeep Security Malware Roundup

This is the GreyKeep Security Malware Roundup for August 29, 2023. Here’s a summary of what’s in this week’s edition:

Targets

MacOS
Adobe ColdFusion
MOVEit Transfer
WinRAR
Openfire XMPP
Ivanti Sentry
Roblox
Juniper SRX
Cisco Nexus 3000/9000 (NX-OS)
Citrix NetScaler
Barracuda ESG
EsafeNet Cobra DocGuard
IoT devices

Organizations

U.S. government
Rust developers
Roblox developers
Taiwan
Hong Kong
Metropolitan Police Service
[Read more…] about Weekly Malware Roundup – August 29, 2023

Ransomware Campaign Targeting MOVEit Impacts 60 Million People

greykeep · August 28, 2023 ·

Progress MOVEit logo
Background by Peter Gargiulo

As reported by security research firms Emsisoft and Resecurity, as many as 1,000 organizations and 60 million individuals have been affected by the recent ransomware campaign targeting a SQL injection vulnerability (CVE-2023-34362) in the MOVEit Transfer web application. An attacker can exploit the vulnerability to access file transfers without authentication.

[Read more…] about Ransomware Campaign Targeting MOVEit Impacts 60 Million People

Cybersecurity Daily: August 24, 2023

greykeep · August 24, 2023 ·

GreyKeep Security Cybersecurity Daily News

Your daily dose of relevant cybersecurity advisories, industry news, and product updates for August 24, 2023.

For the latest news on malware and ransomware, check out our weekly Malware Roundup.

Advisories

  • More than 3,000 Openfire servers exposed to attacks using a new exploit
  • Hackers use public ManageEngine exploit to breach internet org
  • New stealthy techniques let hackers gain Windows SYSTEM privileges
  • New Variant of XLoader macOS Malware Disguised as ‘OfficeNote’ Productivity App
  • Ivanti Issues Fix for Critical Vuln in Its Sentry Gateway Technology
  • Adobe Patches Critical Deserialization Vulnerability, but Exploits Persist
  • New Juniper Junos OS Flaws Expose Devices to Remote Attacks – Patch Now
  • Akira ransomware gang spotted targeting Cisco VPN products to hack organizations
  • FBI: Patches for Recent Barracuda ESG Zero-Day Ineffective
  • Traders Targeted by Cybercriminals in Attack Exploiting WinRAR Zero-Day
  • Rockwell ThinManager Vulnerabilities Could Expose Industrial HMIs to Attacks
  • New Telegram Bot “Telekopye” Powering Large-scale Phishing Scams from Russia
  • TP-Link Tapo L530E smart bulb flaws allow hackers to steal user passwords
  • Apache XML Graphics Batik Flaw Exposes Sensitive Information
  • FBI Warns of Cryptocurrency Heists by North Korea’s Lazarus Group
  • Attackers Dangle AI-Based Facebook Ad Lures to Hijack Business Accounts
[Read more…] about Cybersecurity Daily: August 24, 2023

Weekly Malware Roundup – August 21, 2023

greykeep · August 21, 2023 ·

GreyKeep Security Malware Roundup

This is the GreyKeep Security Malware Roundup for August 21, 2023. Here’s a summary of what’s in this week’s edition:

Organizations

CyberPower
Dataprobe
Microsoft
Apple
Citrix
Adobe
U.S. Military
Taiwan
South Korea
Latin Americans

Targets

CyberPower DCIM
Dataprobe iBoot PDU
Windows
Microsoft OWA
Powershell Gallery
MacOS
Linux
Android
Citrix NetScaler
Adobe Commerce/Magento 2
Ivacy VPN
GitLab
IoT
Zulip
[Read more…] about Weekly Malware Roundup – August 21, 2023

Cybersecurity Daily: August 17, 2023

greykeep · August 17, 2023 ·

GreyKeep Security Cybersecurity Daily News

Your daily dose of relevant cybersecurity advisories, industry news, and product updates for August 17, 2023.

Advisories

  • Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning
  • Two unauthenticated stack buffer overflows found in Ivanti Avalanche EMM
  • Citrix ADC, Gateways Still Backdoored, Even After Being Patched
  • Cisco Unified Communications Manager Flaw Let Attacker Launch SQL Injection Attacks
  • New Apple iOS 16 Exploit Enables Stealthy Cellular Access Under Fake Airplane Mode
  • Patch Now: OpenNMS Bug Steals Data, Triggers Denial of Service
  • Report: PowerShell Gallery susceptible to typosquatting and other package-management attacks
  • Kubernetes clusters face widespread attacks across numerous organizations
  • New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking Activities
  • Gigabud RAT Attacking Android Users to Steal Banking Credentials
  • Thousands of Android APKs use compression trick to thwart analysis
[Read more…] about Cybersecurity Daily: August 17, 2023
  • « Go to Previous Page
  • Page 1
  • Page 2
  • Page 3
  • Page 4
  • Page 5
  • Go to Next Page »

How can we help you become more secure? Contact Us

GreyKeep Security

© 2025 GreyKeep Security LLC · All Rights Reserved

  • Services
  • Our Approach
  • GreyKeep Security Blog
  • About Us
  • Contact Us