RustDuck Botnet Hijacks Home Routers While Evading Researchers

A new malware family called RustDuck is hijacking home routers, IP cameras, and Android boxes to build a DDoS network, deliberately evolving to evade security researchers. Combined with GoSerpent’s espionage campaign against Southeast Asian governments and Bitdefender’s survey revealing organizational blind spots, here’s this week’s malware landscape.

Read more

Ransomware Victims Are Paying Less, Leaving Extortionists Frustrated

Ransomware victims are paying less, genuinely frustrating extortionists, according to a new industry roundup. The same week, 23andMe agreed to an $18 million breach settlement, a 13-year-old was found to have deployed Daixin ransomware, and attackers used reverse-SOCK proxies with disguised payloads. Here’s this week’s ransomware landscape.

Read more

CISA Sets July 19 Deadline for SharePoint Flaw as Identity Attacks Overtake Exploits

CISA set a July 19 federal deadline for a critical SharePoint remote code execution flaw as identity attacks officially overtook exploits as the top ransomware cause. Combined with Ernst & Young’s breach through a compromised support ticket system and Bruce Schneier’s warning on frontier AI access restrictions, here’s this week’s cybersecurity landscape.

Read more