HelloKitty ransomware now exploiting Apache ActiveMQ flaw in attacks

The HelloKitty ransomware operation is exploiting a recently disclosed Apache ActiveMQ remote code execution (RCE) flaw to breach networks and encrypt devices. The flaw, tracked CVE-2023-46604, is a critical severity (CVSS v3 score: 10.0) RCE allowing attackers to execute arbitrary shell commands by exploiting the serialized class types in the OpenWire protocol. Read more…

FIRST releases updated Computer Security Incident Response Team (CSIRT) Services Framework – Version 2.1

March 12th, 2020 – The Forum of Incident Response and Security Teams (FIRST) has released an updated version of its Computer Security Incident Response Team (CSIRT) Services Framework. The new framework was developed by recognized experts from the FIRST community with strong support from the Task Force CSIRT (TF-CSIRT) Community, Read more…