Daily Cyber Brief
Chinese hackers target Russian soldiers, Coca-Cola investigates hack, Microsoft identifies multiple vulnerabilities on Linux...

Cybersecurity
Russia hasn’t demonstrated very sophisticated or destructive cyberattacks and Ukraine is able to resist attempts to hack its infrastructure, according to a top Ukrainian cyber official. “Russian cyber offensive operations likely reached their full potential and we do believe the…
A top Army official said the service’s updated cyber security risk management framework will significantly change how the service attacks a glaring, decades-old weakness: bureaucracy. Risk Management Framework 2.0 will get the service “to this notion of continuous…
Coca-Cola, the world's largest soft drinks maker, has confirmed in a statement to BleepingComputer that it is aware of the reports about a cyberattack on its network and is currently investigating the claims. The American beverage giant has started to investigate…
An unnamed engineering company with energy and military customers was recently the target of a North Korean hacking group that has been operating since at least 2009, researchers said Wednesday. The Threat Hunter Team at Symantec said the attackers breached the…
A China-linked government-sponsored threat actor has been observed targeting Russian speakers with an updated version of a remote access trojan called PlugX. Secureworks attributed the attempted intrusions to a threat actor it tracks as Bronze President, and by…
Four months after the critical flaw was discovered, attackers have a massive attack surface from which they can exploit the flaw and take over systems, researchers found. Four months after the discovery of the zero-day Log4Shell critical flaw, millions of Java applications still…
An Israeli private investigator could spend the next 27 years in prison after pleading guilty to taking part in an international fraud and hacking conspiracy. Aviram Azari was arrested in Manhattan, New York, in 2019 and charged with conspiracy to commit computer hacking…
Several vulnerabilities giving an attacker the ability to exploit Linux desktop endpoints were discovered by Microsoft researchers this week. In a blog on Tuesday, Microsoft 365 Defender Research Team’s Jonathan Bar Or said the vulnerabilities – known collectively as…
A previously unknown and financially motivated hacking group is impersonating a Russian agency in a phishing campaign targeting entities in Eastern European countries. The phishing emails pretend to come from the Russian Government’s Federal Bailiffs Service and are…
Threat analysts have uncovered yet a new campaign that uses the RIG Exploit Kit to deliver the RedLine stealer malware. Exploit kits (EKs) have dropped drastically in popularity as they targeted vulnerabilities in web browsers introduced by plug-in software such as the now…