AcronisAcronisAcronisAcronisAcronisAcronisAcronisAcronisAcronisAcronisAcronis
Acronis
December 15, 2021

HR management provider Kronos hit by ransomware

Kronos, the provider of workforce management and human capital management solutions, has suffered a significant ransomware attack that threatens to disrupt payroll and timesheet processing services for its customer organizations.

December 13, 2021

Critical Apache Log4j vulnerability discovered — here's what you need to know

Late last week, a critical zero-day vulnerability in the popular Java logging library Log4j surfaced when attackers were observed exploiting Minecraft servers via the game’s chat box. It has since become clear that the vulnerability in question poses perhaps the largest security threat we’ve seen in years.Details are still unfolding, but here’s what we know now.

November 30, 2021

VenomRAT: A remote access tool with dangerous consequences

The first messages about VenomRAT started to appear in June 2020. By analyzing the code, analysts concluded that this new threat is a modified fork of Quasar RAT. The malware itself was introduced on malware-oriented forums, in posts advertising it as an effective tool to remotely access computers for $150 per month.

November 26, 2021

Trojan-as-a-service: From Formbook to XLoader

Discovered in 2016, Formbook appeared on underground forums, advertised as an infostealer for Windows. In October 2020, Formbook was renamed XLoader; as its developers say, it has the same features, but has improved from the previous version. XLoader can steal users’ information from various browsers, email clients and messengers, and is available to cybercriminals as a service.

November 22, 2021

Chrome version 96 includes fixes for multiple serious vulnerabilities

Google recently released Chrome version 96, the latest, most secure version of their highly popular web browser. This update introduces fixes for 25 security vulnerabilities, seven of which are considered to be high severity. Some have already been the cause of zero-day attacks.