“Siloscape”, the first malware to target Windows containers, breaks out of Kubernetes clusters to plant backdoors and raid nodes for credentials. Windows Container Malware Targets Kubernetes Clusters
Unprotected server exposes AMT Games user data containing user emails and purchase information. ‘Battle for the Galaxy’ Mobile Game Leaks 6M Gamer Profiles
REvil threat actors may be behind a set of PowerShell scripts developed for encryption and weaponized to exploit vulnerabilities in corporate networks, the ransom note suggests. Exchange Servers Targeted by ‘Epsilon Red’ Malware
Joseph Carson, chief security scientist and advisory CISO at ThycoticCentrify, discusses best practices for securing healthcare data against the modern threat landscape. Then and Now: Securing Privileged Access Within Healthcare Orgs
In this Threatpost podcast, Fortinet’s top researcher sketches out the ransom landscape, with takeaways from the DarkSide attack on Colonial Pipeline. Podcast: The State of Ransomware
The botnet can be used to mount different kinds of attacks, including code-execution and DDoS. DarkCrewFriends Returns with Botnet Strategy
A first-stage malware loader spotted in active campaigns has added additional exploits and a new backdoor capability. Golang Worm Widens Scope to Windows, Adds Payload Capacity
Several high-severity flaws in Nvidia’s GPU display drivers for Windows users could lead to code-execution, DoS and more. Nvidia Warns Windows Gamers of Serious Graphics Driver Bugs
The CryCryptor malware strain is a brand-new family of threats, leveraging COVID-19 to spread. Emerging Ransomware Targets Photos, Videos on Android Devices
The Russian spy group, a.k.a. BlackEnergy, is actively compromising Exim mail servers via a critical security vulnerability. NSA Warns of Sandworm Backdoor Attacks on Mail Servers