🏴☠️ Incransom has just published a new victim : Richland City Hall
The Richland Library continues to offer temporary digital library cards and will soon provide enhanced access to Ancestry.com. There are also future plans for drive-up or curbside capabilities.
by Ransomware live - https://r.zerozone.it/post/GyEb8ZWWEdGRA9ryY
The Richland Library continues to offer temporary digital library cards and will soon provide enhanced access to Ancestry.com. There are also future plans for drive-up or curbside capabilities.
by Ransomware live - https://r.zerozone.it/post/GyEb8ZWWEdGRA9ryY
www.ransomware.live
Ransomware.live 👀
Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…
🏴☠️ Rhysida has just published a new victim : ICC
ICC ICC is a structured cabling solutions manufacturer of copper & fiber optic connectivity products for commercial & residential applications More
by Ransomware live - https://r.zerozone.it/post/xXGEubEQeBBMJDpn7
ICC ICC is a structured cabling solutions manufacturer of copper & fiber optic connectivity products for commercial & residential applications More
by Ransomware live - https://r.zerozone.it/post/xXGEubEQeBBMJDpn7
www.ransomware.live
Ransomware.live 👀
Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…
🏴☠️ Qilin has just published a new victim : Golden Acre
Golden Acre Garden Sentre. Calgary's garden centre since 1967 and still growing strong. With hundreds of thousands of square feet in retail space.Golden Acre carries a wide variety of Annuals, Perennials, Trees and Shrubs, Houseplants, Garden ...
by Ransomware live - https://r.zerozone.it/post/U4vtynekRng3vDs00
Golden Acre Garden Sentre. Calgary's garden centre since 1967 and still growing strong. With hundreds of thousands of square feet in retail space.Golden Acre carries a wide variety of Annuals, Perennials, Trees and Shrubs, Houseplants, Garden ...
by Ransomware live - https://r.zerozone.it/post/U4vtynekRng3vDs00
www.ransomware.live
Ransomware.live 👀
Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…
Sonatype Nexus Repository 3路径遍历漏洞（CVE-2024-4956）
Sonatype Nexus Repository 3路径遍历漏洞（CVE-2024-4956）
by SeeBug - https://r.zerozone.it/post/w66aCYV1P32nA3Hab
Sonatype Nexus Repository 3路径遍历漏洞（CVE-2024-4956）
by SeeBug - https://r.zerozone.it/post/w66aCYV1P32nA3Hab
www.seebug.org
Sonatype Nexus Repository 3路径遍历漏洞（CVE-2024-4956） - Knownsec Seebug Vulnerability Platform
Introduction:Sonatype Nexus Repository 3路径遍历漏洞（CVE-2024-4956）
🏴☠️ Cactus has just published a new victim : schuettemetals.com
Download link #1: https://***************.onion/SMI/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/SMI/PROOF/DATA DESCRIPTIONS: Financial documents, supplier agreements, contracts, NDAs, Personal identifying information, Engineering data, employee personal files, database exports, etc.
by Ransomware live - https://r.zerozone.it/post/XU6nbGvAf6374JV0r
Download link #1: https://***************.onion/SMI/PROOF/Mirror: https://cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion/SMI/PROOF/DATA DESCRIPTIONS: Financial documents, supplier agreements, contracts, NDAs, Personal identifying information, Engineering data, employee personal files, database exports, etc.
by Ransomware live - https://r.zerozone.it/post/XU6nbGvAf6374JV0r
www.ransomware.live
Ransomware.live 👀
Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…
🏴☠️ Blacksuit has just published a new victim : catiglass.com $100.000
by Ransomware live - https://r.zerozone.it/post/d8eX7qgNQ89KhDnQP
by Ransomware live - https://r.zerozone.it/post/d8eX7qgNQ89KhDnQP
www.ransomware.live
Ransomware.live 👀
Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…
🏴☠️ Lockbit3 has just published a new victim : londondrugs.com
London Drugs offers weekly flyer deals, Earth Month essentials, savings events and in-store events for various products. Shop online or in-store for pharmaceuticals, cosmetics, electronics, cameras, housewares and more. With endless revenue, greed...
by Ransomware live - https://r.zerozone.it/post/Dt0Wnu3wDvpsbHJ1K
London Drugs offers weekly flyer deals, Earth Month essentials, savings events and in-store events for various products. Shop online or in-store for pharmaceuticals, cosmetics, electronics, cameras, housewares and more. With endless revenue, greed...
by Ransomware live - https://r.zerozone.it/post/Dt0Wnu3wDvpsbHJ1K
www.ransomware.live
Ransomware.live 👀
Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…
🏴☠️ Bianlian has just published a new victim : Critchfield & Johnston
Critchfield, Critchfield & Johnston, Ltd. is a company specializes in law services. It offers services in the areas of corporate & business, employment of labor, litigation, oil & gas, real estate, etc.
by Ransomware live - https://r.zerozone.it/post/pUBTf0eUWwF5vRAW7
Critchfield, Critchfield & Johnston, Ltd. is a company specializes in law services. It offers services in the areas of corporate & business, employment of labor, litigation, oil & gas, real estate, etc.
by Ransomware live - https://r.zerozone.it/post/pUBTf0eUWwF5vRAW7
www.ransomware.live
Ransomware.live 👀
Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…
Vulnerabilità presenti in prodotti NAS QNAP
(AL02/240523/CSIRT-ITA)
Aggiornamenti di sicurezza QNAP risolvono alcune vulnerabilità, di cui 2 con gravità “alta” nei prodotti QTS e QuTS hero.
by CSIRT - https://r.zerozone.it/post/y8zjBgYm3fsGtXg4P
(AL02/240523/CSIRT-ITA)
Aggiornamenti di sicurezza QNAP risolvono alcune vulnerabilità, di cui 2 con gravità “alta” nei prodotti QTS e QuTS hero.
by CSIRT - https://r.zerozone.it/post/y8zjBgYm3fsGtXg4P
Sanate vulnerabilità su GitLab CE/EE
(AL01/240523/CSIRT-ITA)
Rilasciati aggiornamenti di sicurezza che risolvono 7 vulnerabilità, di cui una con gravità “alta”, in GitLab Community Edition (CE) e Enterprise Edition (EE).
by CSIRT - https://r.zerozone.it/post/Gs7Tk4EmzAcCeRxnQ
(AL01/240523/CSIRT-ITA)
Rilasciati aggiornamenti di sicurezza che risolvono 7 vulnerabilità, di cui una con gravità “alta”, in GitLab Community Edition (CE) e Enterprise Edition (EE).
by CSIRT - https://r.zerozone.it/post/Gs7Tk4EmzAcCeRxnQ
Atlassian: PoC pubblico per lo sfruttamento della CVE-2024-21683
(AL03/240523/CSIRT-ITA)
Disponibile un Proof of Concept (PoC) per la CVE-2024-21683 – già sanata dal vendor – presente in Atlassian Confluence Data Center and Server. Tale vulnerabilità, qualora sfruttata, potrebbe permettere l’esecuzione di codice da remoto sui dispositivi interessati.
by CSIRT - https://r.zerozone.it/post/JrBrEmnBweuzCnAb9
(AL03/240523/CSIRT-ITA)
Disponibile un Proof of Concept (PoC) per la CVE-2024-21683 – già sanata dal vendor – presente in Atlassian Confluence Data Center and Server. Tale vulnerabilità, qualora sfruttata, potrebbe permettere l’esecuzione di codice da remoto sui dispositivi interessati.
by CSIRT - https://r.zerozone.it/post/JrBrEmnBweuzCnAb9
🏴☠️ Meow has just published a new victim : GE Aerospace
SALE
by Ransomware live - https://r.zerozone.it/post/5ZZWrc0SvKxDh6qGd
SALE
by Ransomware live - https://r.zerozone.it/post/5ZZWrc0SvKxDh6qGd
www.ransomware.live
Ransomware.live 👀
Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…
🏴☠️ Donutleaks has just published a new victim : Patriot Machine, Updated data leak.
Today we consider make public any related data about Patriot Machine operations and business. The defense contractors which cant defense his docs. Updated version of that will be on our file server. Stay tuned. Guys was so skill-able and professional what mr.Mask and his SpaceX working with them. Its…
by Ransomware live - https://r.zerozone.it/post/CyXuAP4dFDrauCd0D
Today we consider make public any related data about Patriot Machine operations and business. The defense contractors which cant defense his docs. Updated version of that will be on our file server. Stay tuned. Guys was so skill-able and professional what mr.Mask and his SpaceX working with them. Its…
by Ransomware live - https://r.zerozone.it/post/CyXuAP4dFDrauCd0D
www.ransomware.live
Ransomware.live 👀
Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…
Campagna phishing a tema Zimbra
(AL01/240524/CSIRT-ITA)
Questo CSIRT ha recentemente rilevato il riacutizzarsi di una campagna di phishing a tema Zimbra che prende di mira principalmente organizzazioni pubbliche e volta a carpire le credenziali utente delle potenziali vittime.
by CSIRT - https://r.zerozone.it/post/Q8fbVK47KT38EVvsZ
(AL01/240524/CSIRT-ITA)
Questo CSIRT ha recentemente rilevato il riacutizzarsi di una campagna di phishing a tema Zimbra che prende di mira principalmente organizzazioni pubbliche e volta a carpire le credenziali utente delle potenziali vittime.
by CSIRT - https://r.zerozone.it/post/Q8fbVK47KT38EVvsZ
Ransomware “Cambiare Rotta”: Una minaccia distruttiva per l’Italia
È risaputo che esiste un generatore di ransomware Chaos basato su GUI, che consente di personalizzare facilmente un ransomware attraverso una serie di opzioni. Il recente campione scoperto da SonicWall, per il quale non ha fornito alcun IoC, sembra essere stato creato utilizzando proprio questo builder. Purtroppo, non è ancora [...]
by CERT-AgID - https://r.zerozone.it/post/YX0X1xZSfQf2gPav9
È risaputo che esiste un generatore di ransomware Chaos basato su GUI, che consente di personalizzare facilmente un ransomware attraverso una serie di opzioni. Il recente campione scoperto da SonicWall, per il quale non ha fornito alcun IoC, sembra essere stato creato utilizzando proprio questo builder. Purtroppo, non è ancora [...]
by CERT-AgID - https://r.zerozone.it/post/YX0X1xZSfQf2gPav9
CERT-AGID
Ransomware “Cambiare Rotta”: Una minaccia distruttiva per l’Italia
È risaputo che esiste un generatore di ransomware Chaos basato su GUI, che consente di personalizzare facilmente un ransomware attraverso una serie di opzioni. Il recente campione scoperto da SonicWall, per il quale non ha fornito alcun IoC, sembra essere…
Risolta vulnerabilità in Cisco Firepower Management
(AL02/240524/CSIRT-ITA)
Aggiornamenti di sicurezza Cisco sanano una vulnerabilità con gravità “alta” presente nel prodotto Firepower Management. Tale vulnerabilità, dovuta da un’errata convalida dell’input nell’interfaccia di gestione web, potrebbe permettere la modifica arbitraria dei dati sul database di back-end.
by CSIRT - https://r.zerozone.it/post/rHPrfvjngsbYsYXq9
(AL02/240524/CSIRT-ITA)
Aggiornamenti di sicurezza Cisco sanano una vulnerabilità con gravità “alta” presente nel prodotto Firepower Management. Tale vulnerabilità, dovuta da un’errata convalida dell’input nell’interfaccia di gestione web, potrebbe permettere la modifica arbitraria dei dati sul database di back-end.
by CSIRT - https://r.zerozone.it/post/rHPrfvjngsbYsYXq9
Sintesi riepilogativa delle campagne malevole nella settimana del 17 – 24 Maggio 2024
In questa settimana, il CERT-AGID ha riscontrato ed analizzato, nello scenario italiano di suo riferimento un totale di 26 campagne malevole, di cui 23 con obiettivi italiani e 3 generiche che hanno comunque interessato l’Italia, mettendo a disposizione dei suoi enti accreditati i relativi 139 indicatori di compromissione (IOC) individuati.
by CERT-AgID - https://r.zerozone.it/post/pnXVm06QZmbExcUkM
In questa settimana, il CERT-AGID ha riscontrato ed analizzato, nello scenario italiano di suo riferimento un totale di 26 campagne malevole, di cui 23 con obiettivi italiani e 3 generiche che hanno comunque interessato l’Italia, mettendo a disposizione dei suoi enti accreditati i relativi 139 indicatori di compromissione (IOC) individuati.
by CERT-AgID - https://r.zerozone.it/post/pnXVm06QZmbExcUkM
CERT-AGID
Sintesi riepilogativa delle campagne malevole nella settimana del 17 – 24 Maggio 2024
In questa settimana, il CERT-AGID ha riscontrato ed analizzato, nello scenario italiano di suo riferimento un totale di 26 campagne malevole, di cui 23 con obiettivi italiani e 3 generiche che hanno comunque interessato l’Italia, mettendo a disposizione dei…