Authorities have not released the suspect’s name, who was only identified as a male from the Vaucluse department in southeast France, nor the name of the ransomware group with whom he collaborated.

Cloud environments evolve and change, and CSPs are constantly adding new functional services that come with unique configuration and security tools to manage them effectively.

Dragos is currently developing three new Activity Groups this year and has also discovered activity across three existing activity groups: KAMACITE, WASSONITE, and STIBNITE.

The malware uses a resilient domain generation algorithm to identify its C2 infrastructure and utilizes the Windows Registry for all of its storage operations, thereby bypassing antimalware engines.

Phish kits are sets of files that contain all the code, graphics, and configuration files to be deployed to make a phishing page. These are designed to be easy to deploy as well as reusable.

An FBI investigation on a recent breach suffered by an Oregon healthcare firm lead to the accidental revelation that the HelloKitty ransomware gang (Five Hands) operates out of Ukraine.

The UK’s National Cyber Security Centre (NCSC) has made one final plea to consumers ahead of the busiest shopping weekend before Christmas to be alert to fraud and data theft attempts.

Even more troublingly, researchers at Praetorian warned of a third separate security weakness in Log4j version 2.15.0 that can “allow for exfiltration of sensitive data in certain circumstances.”

The bill passed by the Senate includes a National Cyber Exercise program that will test the country’s cyber preparedness and a “CyberSentry” provision to monitor critical infrastructure.