Cybersecurity

CVE-2024-21412: DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign

The decrypted request content is as follows: 1000|87|283|Yes|6.1.7|||” Conclusion In this research, a follow-up to our Water Hydra APT Zero Day campaign analysis, we explored how the DarkGate operators were able to exploit CVE-2024-21412 as a zero-day attack to deploy the complex and evolving DarkGate malware. We also explored how security bypass vulnerabilities can be […]

Cybersecurity

Iowa electric, water utility says info of nearly 37,000 leaked in January ransomware attack

A utility company controlling the water, electricity and internet for a town in eastern Iowa confirmed that a January ransomware attack led to the exposure of sensitive information from nearly all local residents. Muscatine Power and Water — providing the Muscatine and Fruitland area with internet, TV, phone, water, and electric services for more than […]

Cybersecurity

New Guidance Urges US Water Sector to Boost Cyber Resilience

Critical Infrastructure Security CISA, EPA and FBI Warn of Increased Cyberthreats Targeting US Water Systems Chris Riotta (@chrisriotta) • January 19, 2024     CISA, the EPA and the FBI urged water sector officials to bolster cyber defenses in guidance published on Thursday. (Image: Shutterstock) The water and wastewater sector is grappling with cybersecurity challenges […]