News Releases and Media Coverage

Legitimate Software Abuse: A Disturbing Trend in Ransomware Attacks

Build a culture of security so that everyone is on the lookout for suspect behavior. Implement least privilege, improve visibility.

CyberWire Daily Podcast - Episode 1813

Our guest Manoj Sharma from Symantec explains the differences between Zero Trust and SASE.

3CX data breach shows organizations can’t afford to overlook software supply chain attacks

Last month, VoIP provider 3CX experienced a data breach after an employee downloaded a trojanized version of Trading Technologies’ X_Trader software.

That 3CX supply chain attack keeps getting worse: Other vendors hit

We thought it was probably the case when the news came out, but now it's been confirmed: The X_Trader supply chain attack behind the 3CX compromise last month wasn't confined to the telco developer.

Modified X_Trader software led to compromise of two critical infrastructure targets, Symantec says

Two targets in the energy sector are among the victims of a supply chain attack that is linked to North Korea and with a growing list of victims.

Daggerfly APT Targets African Telecoms Firm With New MgBot Malware

The APT group known as Daggerfly (as well as Evasive Panda and Bronze Highland) has been observed targeting a telecommunications organization in Africa with new plugins created with the MgBot malware.

Play Ransomware Attacks Utilize New Custom Tools

Researchers have discovered two new custom tools being leveraged in Play ransomware attacks, as different threat actors increasingly adopt proprietary tools in order to gain a competitive advantage.

Play ransomware gang uses custom Shadow Volume Copy data-theft tool

The Play ransomware group has developed two custom tools in .NET, namely Grixba and VSS Copying Tool, which it uses to improve the effectiveness of its cyberattacks.

Symantec Endpoint Security (SES)

Broadcom's Symantec Endpoint Security Complete delivers on its promises

Broadcom: Unlocking Value And Success For Partners

Broadcom CEO Hock Tan Q&A on how the company is unlocking value and success for partners.

Broadcom’s Ganesh Janakiraman on Multicloud Challenges

Ganesh Janakiraman, Head of Platform Engineering for Broadcom Software, discusses the key trends driving multicloud computing, and also offered advice on improving multicloud deployments.

APT group targeting organizations in Palestinian territories, researchers say

A state-backed group believed to be operating out of the Palestinian territories targeted local organizations in a campaign that began in September 2022 and lasted until at least February 2023.

Arid Viper Hacking Group Using Upgraded Malware in Middle East Cyber Attacks

Symantec, which is tracking the group under its insect-themed moniker Mantis, said the adversary is "going to great lengths to maintain a persistent presence on targeted networks."

Blackfly flies back again.

Dick O'Brien from Symantec’s Threat Hunter team discusses their research on "Blackfly - Espionage Group Targets Materials Technology."

Automatic Updates Deliver Malicious 3CX 'Upgrades' to Enterprises

In a SolarWinds-like attack, compromised, digitally signed versions of 3CX DesktopApp are landing on user systems via the vendor's update mechanism.

North Korean Hackers Use Trojanized 3CX DesktopApp in Supply Chain Attacks

The Symantec threat intelligence team shared the findings in an advisory published earlier today, explaining the attackers’ tactics were similar to those used against SolarWinds in 2022.

Hock Tan: Broadcom-VMware ‘A Win-Win-Win’ for Channel Partners, Buyers

A Broadcom-VMware marriage will only bolster the indirect channel. That’s the latest assertion from Broadcom CEO Hock Tan.

Opinion: These tech giants stand to win by helping companies use AI to cut costs and automate

Cisco, Broadcom, Oracle, HPE and Adobe are industry leaders with innovative strategies and strong financials.

Coding for the future of U.S. national defense

The rise of software factories across the Department of Defense illustrates the art of the possible in developing applications and services across multiple clouds.

Leadership Legend: Hock Tan, President and CEO of Broadcom

As President and CEO, Hock Tan has transformed Broadcom into a global superpower thanks to a series of smart business decisions and bold acquisitions.

International Women's Day 2023: Here's How 10 Influential Channel Chiefs Describe Their Channel Philosophy

In celebration of International Women's Day, here are 10 women from CRN's™ 2023 Most Influential Channel Chiefs describing their personal channel philosophy.

China's BlackFly Targets Materials Sector in 'Relentless' Quest for IP

Separate attacks on two subsidiaries of an Asian conglomerate reflect a surge of cyber-espionage activity in the region in the last 12 months.

Taking the risk out of the semiconductor supply chain

Hock Tan, president & CEO of global semiconductor and software provider Broadcom, shares his views on securing the semiconductor supply chain and critical processes that occur after chip fabrication.

A Year Into Russia's Invasion of Ukraine, We're Still Bracing for a Massive Cyberwar

Russia's assault on Ukraine, entering its second year, has been largely a physical war. Experts are still concerned that can change.

Hydrochasma Threat Group Bombards Targets With Slew of Commodity Malware, Tools

A previously unidentified threat group uses open source malware and phishing to conduct cyber-espionage on shipping and medical labs associated with COVID-19 treatments and vaccines.

New Hacking Cluster 'Clasiopa' Targeting Materials Research Organizations in Asia

Materials research organizations in Asia have been targeted by a previously unknown threat actor using a distinct set of tools. Symantec is tracking the cluster under the moniker Clasiopa.

Unanswered Questions Cloud the Recent Targeting of an Asian Research Org

Symantec revealed evidence of a previously undocumented threat actor it's calling "Clasiopa." Clasiopa has been observed deploying a unique malware backdoor called "Atharvan" in its campaign.

New attack group focuses on Asian medical and shipping companies

A recently uncovered campaign that has targeted organizations in Asia in the medical and shipping industries has shown highly targeted lures and time-tested techniques still work.

What we've learned from a year of Russian cyberattacks in Ukraine

Nearly a year into Russia’s conflict with Ukraine, the world has learned much about both the capabilities and limits of hacking in wartime.

Hackers backdoor Microsoft IIS servers with new Frebniis malware

Frebniis was discovered by Symantec's Threat Hunter Team, who reported that an unknown threat actor is currently using it against Taiwan-based targets.

Researchers unearth Windows backdoor that’s unusually stealthy

Researchers have discovered a clever piece of malware that stealthily exfiltrates data and executes malicious code from Windows systems by abusing a feature in Microsoft IIS.

Broadcom CEO: VMware Partners ‘Will Remain Essential’ After Purchase

As Broadcom’s acquisition of VMware remains in approvals limbo in Europe, Hock Tan is talking up the benefits of the $61 billion deal, especially as they relate to VMware partners and customers.

New Info-Stealer Discovered as Russia Prepares Fresh Offensive

Researchers have found a new piece of information-stealing malware targeting Ukrainian organizations, as the country braces for a fresh wave of attacks ahead of a predicted new Russian offensive.

Russian ‘WhisperGate’ hackers are using new data-stealing malware to target Ukraine

Researchers say they have recently observed a Russian hacking crew behind the destructive WhisperGate malware cyberattacks, targeting Ukrainian entities with a new information-stealing malware.

Ransomware attack on ION Trading shows markets' vulnerability to hackers

In a rare case of a ransomware attack bringing down a segment of the financial services industry, a major derivatives software provider fell victim to a Russia-linked ransomware group last week.

2023 Channel Chiefs: The 50 Most Influential

Here’s a look at 50 influential leaders who drive the channel agenda and evangelize the importance of channel partnerships within the IT industry, including Broadcom Software's Cynthia Loyd.

Building a broader IT modernization strategy

Government agencies are undertaking an unprecedented period of IT and application modernization. Hear what Hock Tan has to say as they tackle building a broader IT modernization strategy.

Are The EU Concerns With Broadcom’s VMware Deal Justified?

In December 2022, the European Commission (EC) opened an in-depth investigation into the Broadcom/VMware deal. In this article, I will outline why the EC's concerns are unfounded.

The fight for the airwaves in your house

For years, big consumer-tech companies like Meta, Apple and Google have been leaning on the government to free up little pieces of the wireless spectrum as “unlicensed” airwaves. What are they after?

Billbug infests government agencies

Brigid O. Gorman from Symantec's Threat Hunter Team joins Dave to discuss their report "Billbug - State-sponsored Actor Targets Cert Authority and Government Agencies in Multiple Asian Countries."

When Employees Leave, Sensitive Data Often Leaves With Them

Disgruntled workers can take corporate secrets or get careless with them.

Bluebottle Continues Bank Heist Assault With Signed Malware

The financially motivated threat group also known as OPERA1ER, demonstrated an evolution in tactics in its compromise of 3 Francophone financial institutions in Africa, adding to its $11 million haul.

French-speaking cybercriminals continue attacks on African banks

A cybercrime group believed responsible for a series of thefts targeting African banks continued its attacks on financial institutions well into 2022, according new research from Symantec.

Why enterprises need to tame IT complexity [Q&A]

We spoke to Andy Nallappan at Broadcom about how organizations can partner with their strategic vendors to reduce IT complexity, drive more innovation and ultimately boost their bottom line.

How AI cybersecurity tools tackle today's top threats

With the constant evolution of new technologies in the cybersecurity landscape, malicious actors and cyber bad guys are exploiting new ways to plot shrewder and more successful attacks.

No, Broadcom And Hock Tan Aren’t Going To Raise Prices On VMware Products

Last week, Broadcom CEO Hock Tan made it very clear he wouldn’t raise prices. Crystal clear.

No VMware Price Increases, SMB Neglect, Broadcom CEO Vows

Broadcom CEO Hock Tan is reiterating to VMware customers and partners that Broadcom won’t raise VMware product prices or neglect SMB customers.

Is It Time To Start Giving Broadcom’s Pending Acquisition Of VMware A Chance?

After personally talking with Broadcom CEO Hock Tan and chatting with a few VMware partners and customers, I am wondering, is it time we start giving the acquisition a chance?

The Yanluowang ransomware group in their own words

On Halloween, a message appeared on the Yanluowang ransomware group’s extortion site: “Check and mate! Yanluowang Matrix chat hacked,” it began. “Time’s up;) you screwed!!”

China-Based Billbug APT Infiltrates Certificate Authority

The state-sponsored cyberattack group known as Billbug managed to compromise a digital certificate authority (CA) as part of a wide-ranging espionage campaign that stretched back to March.

How zero-trust architectures can prevent supply chain attacks

Organizations today depend on third parties to streamline global supply chain operations, reduce costs and more. Although, third parties also leave organizations vulnerable to supply chain attacks.

State-sponsored hackers in China compromise certificate authority

Nation-state hackers based recently infected a certificate authority and several gov't and defense agencies with a potent malware cocktail for burrowing inside a network and stealing sensitive info.

Chinese hackers target government agencies and defense orgs

A cyberespionage threat actor tracked as Billbug has been running a campaign targeting a certificate authority, government agencies, and defense organizations in several countries in Asia.

India lifts download ban on VLC

India has lifted the download ban on VLC, more than nine months after it mysteriously blocked the official website of the popular media playback software in the South Asian market.

IT Complexity Is Growing Issue Hindering Companies' Success

As organizations race to transform their businesses digitally, IT complexity is increasing dramatically, according to a Harvard Business Review Analytic Services study sponsored by Broadcom Software.

Broadcom + VMware: The Future of Enterprise IT is Multi-Cloud

Broadcom CEO Hock Tan shares his current thinking on the company's plans for VMware’s business following transaction close.

Industry Voice: 'We're committed to VMware's partners' - Broadcom

Broadcom CEO shares answers to some FAQs put to the company by VMware's partners amid the ongoing integration process

This stealthy hacking campaign uses a new trick to deliver its malware

Cyber attackers are using a new technique to hide their malicious activities and compromise victims with trojan malware backdoors.

Espionage Hackers Use Microsoft IIS to Plant Malware

Threat actors are using Internet Information Services - Microsoft's extensible web server software - to deliver a previously undocumented dropper that is being used to install a new backdoor.

Burgeoning Cranefly hacking group has a new intel-gathering tool

An undocumented dropper uses a new technique of reading commands from Internet Information Services (IIS) logs to carry out intelligence gathering and deliver backdoors, according to Symantec.

Broadcom CEO: What the VMware merger will look like

Broadcom CEO Hock Tan says the goal of buying VMware is more and better products without raising prices.

BlackByte ransomware using custom data exfiltration tool

Symantec researchers say BlackByte ransomware may be poised to move into the elite ransomware ranks, as the group has begun developing its own custom malware tools.

BlackByte ransomware picks up where Conti and Sodinokibi left off

Symantecâ€™s Threat Hunter Team announced that an affiliate of the BlackByte ransomware-as-a-service organization is using the custom data exfiltration tool Infostealer.Exbyte to steal data.

China-Linked Cyber-Espionage Team Homes In on Hong Kong Government Orgs

The Winnti cyber-espionage group out of China was discovered deploying the Spyder Loader malware as part of an ongoing campaign to gather intelligence on government organizations in Hong Kong.

Hackers compromised Hong Kong govt agency network for a year

Researchers at Symantec have uncovered cyberattacks attributed to the China-linked espionage actor APT41 that breached government agencies in Hong Kong and remained undetected for a year.

Hong Kong Government Organizations Were Compromised by Hacker for a Year

A hacker had breached the Hong Kong government organizations for at least a year undetected, researchers said. Symantec researchers discovered the cyberattacks, which they attributed to APT41.

Disinformation Attacks Threaten US Midterm Elections

Foreign nations continue to target various US public entities and private industries with cyberattacks, but the coming midterms are driving more disinformation than hacking, say experts.

Noberus ransomware: evolving tactics.

Brigid O Gorman from Symantec's Threat Hunter team joins Dave to discuss their research on "Noberus Ransomware - Darkside and BlackMatter Successor Continues to Evolve its Tactics."

BUDWORM THREAT GROUP ATTACKS REVEAL â€˜CHANGE IN FOCUSâ€™

A known espionage group was recently observed leveraging the Log4j vulnerability to target a number of high-value organizations worldwide, including an unnamed U.S.-based state legislature.

Chinese-linked hackers targeted U.S. state legislature, researchers say

A long-running Chinese-linked cyberespionage group targeted a U.S. state legislatureâ€™s network in July, marking the outfitâ€™s first confirmed attack against the U.S. in years.

Windows Logo Weaponized By State-Backed Chinese APT10 Spies In Ongoing Attacks

The Threat Hunter Team at Symantec has found a Chinese state-backed espionage group using malicious code hidden within a Microsoft Windows logo.

Malware Found Hiding in a Windows Logo

A group of hackers has been found using an old Windows logo to help distribute malware to government targets.

Noberus Amps Its Tactics: How IT Leaders Can Keep Up with Evolving Ransomware

Ransomware descended from the tool used in the Colonial Pipeline attack in 2021 has been leveraging new tools, tactics, and procedures. What does this evolving threat mean for its potential targets?

The Countdown to DORA

With provisional agreement reached on the Digital Operational Resilience Act, the clock is now ticking for banks and ICT services companies with European operations. Here's what you need to know.

Colonial Pipeline ransomware group using new tactics to become more dangerous

Dubbed Coreid, the group has adopted a new version of its data exfiltration tool and is offering more advanced capabilities to profitable affiliates, says Symantec.

Attackers Deploying Noberus Ransomware Update Tactics

The prolific ransomware Noberus, BlackCat or ALPHV has undergone a major update, and researchers warn that attackers using the ransomware have been spotted evolving their tactics.

ALPHV/BlackCat ransomware family becoming more dangerous

Researchers from Symantec share fresh insight into the ongoing development of the ransomware-as-a-service family known variously as ALPHV, BlackCat and Noberus

Experts fear LockBit spread after ransomware builder leaked

A toolkit to create DIY versions of the LockBit ransomware has leaked, raising alarms among incident responders and cybersecurity experts warning of more widespread use in attacks.

How America's Airports Defend Against Cyberthreats

Airport operations work with partners but also turn to cybersecurity vendors to secure aviation networks.

Webworm retools old RATs for new cyberespionage threat

Symantec's Threat Hunter Team uncovered a new cyberespionage campaign run by a threat group named Webworm, which uses customized versions of old remote access Trojans.

Hackers are reviving a long-forgotten malware to help evade detection

A known Chinese threat actor is recycling old malware, in an attempt to evade detection, cut down on costs, and send researchers on a wild goose chase.

Cyberspies drop new infostealer malware on govt networks in Asia

Security researchers have identified new cyber-espionage activity focusing on government entities in Asia, as well as state-owned aerospace and defense firms, telecom companies, and IT organizations.

Careless Errors in Hundreds of Apps Could Expose Troves of Data

Researchers found that mobile applications contain keys that could provide access to both user information and private files from unconnected apps.

Identity Security Pain Points and What Can Be Done

Replacing passwords is not as easy as people think, but there is hope.

Clipminer: Making millions off of malware.

Dick O'Brien from Symantec, a part of Broadcom Software, joins Dave to discuss how the cyber-criminal operation, Clipminer Botnet, makes operators behind it at least $1.7 million.

Broadcom: Planning for the Future with VMware

Since its proposed acquisition of VMware was announced, Hock Tan, president and CEO of Broadcom, has been asked about its future plans. Here’s what he’s saying.

Russia’s Shuckworm cyber group launching ongoing attacks on Ukraine

The Russia-linked cyber group Shuckworm is continuing to target Ukrainian organizations with infostealing malware according to Symantec’s Threat Hunter Team, part of Broadcom Software.

Coalition Of Cybersecurity Leaders Launch Open Cybersecurity Schema Framework (OCSF)

The OCSF project was initiated by a partnership between Splunk and AWS, which built on the ICD Schema developed at Symantec—now part of Broadcom.

Broadcom Software + VMware: Committed to VMware’s Partners

Q&A with Hock Tan, President and CEO, Broadcom, Inc.

Did Russia mess up its cyberwar with Ukraine before it even invaded?

Ukrainian officials say Russia jumped the gun in cyberspace

LockBit ransomware hitting network servers

Affiliates of the LockBit ransomware group are infiltrating on-premises servers to spread malware on targeted networks, according to new research from Broadcom’s threat hunting team at Symantec.

Meet 34 of the UK's most influential vendor leaders- Roy Borden

CRN's inaugural Vendor Power list probes what makes 34 top UK channel leaders tick.

Meet 34 of EMEA's most influential vendor leaders - Nimesh Upadhaya

Channel Partner Insight's inaugural Vendor Power list probes what makes top EMEA channel leaders tick.

This new malware is at the heart of the ransomware ecosystem

A recently developed form of malware has quickly become a key component in powering ransomware attacks. The malware, called Bumblebee, has been analysed by cybersecurity researchers at Symantec.

New Bumblebee malware loader increasingly adopted by cyber threat groups

A recently uncovered malware loader called Bumblebee has been found to be connected to a number of prominent ransomware groups and has been a key component of many cyberattacks.

Lazarus Targets Chemical Sector With 'Dream Job.'

Alan Neville, a Threat Intelligence Analyst from Symantec Broadcom, joins Dave to discuss their research "Lazarus Targets Chemical Sector."

Symantec: More malware operators moving in to exploit Follina

While enterprises are still waiting for Microsoft to issue a fix for the critical "Follina" vulnerability in Windows, yet more malware operators are moving in to exploit it.

Clipminer rakes in $1.7m in crypto hijacking scam

A crew using malware that performs cryptomining and clipboard-hacking operations have made off with at least $1.7 million in stolen cryptocurrency.

Clipminer malware gang stole $1.7M by hijacking crypto payments

Threat analysts have discovered a large operation of a new cryptocurrency mining malware called Clipminer that brought its operators at least $1.7 million from transaction hijacking.

Clipminer' Malware Actors Steal $1.7 Million Using Clipboard Hijacking

The malware known as Clipminer has earned cyberattackers $1.7 million in cryptocurrency mining and theft via clipboard hijacking so far â€“ and it shows no signs of abating.

Compromised military tech?

Dick O'Brien from Symantec's threat hunter team, joins Dave to discuss their work on "Stonefly: North Korea-linked spying operation continues to hit high-value targets."

Broadcom to Acquire VMware for Approximately $61 Billion in Cash and Stock

The acquisition advances Broadcom's strategy to build the world's leading infrastructure technology company, with track record of acquiring established, mission-critical platforms

Clarity and culture: Lessons learned from recent technology staffing shifts

Broadcom's CTO shares experiences with pandemic-era staffing and recruiting challenges.

Broadcom Software CTO: Charting a Course to Software Modernization

Software modernization can help to deliver synergies and efficiencies across business units and product portfolios.

Broadcom’s Industry-Leading AI, Security and Hybrid Cloud Solutions Accelerate Client Value on New z16 Mainframe

Broadcom Inc. announced expanding opportunities for organizations to gain greater value from the company’s advanced AI, security, and hybrid cloud solutions with “Day One” support for IBM’s new z16.

Attackers coming in from the Backdoor?

Vikram Thakur of Symantec Threat Hunter team joins Dave Bittner to discuss their work on Daxin, a new and the most advanced piece of malware researchers have seen from China-linked actors.

South Korea arrests 2 accused of spying for North Korea

Two South Koreans have been arrested on charges of stealing military secrets on behalf of a suspected North Korean spy agent who paid them in cryptocurrency, police said on Thursday (April 28).

North Korean hackers stealing military tech, cybersecurity experts say

A North Korean-linked hacker group recently breached an engineering company with military ties, U.S. cybersecurity firm Symantec said Wednesday, in Pyongyang's latest cyberattack.

Among top hacking nations, North Korea’s the weirdest

In the world of government-backed hackers, North Korea stands out for its sheer weirdness.

Russian state hackers hit Ukraine with new malware variants

Threat analysts report that the Russian state-sponsored threat group known as Gamaredon is launching attacks against targets in Ukraine using new variants of the custom Pteredo backdoor.

A fight to defend Taiwan financial institutions.

Alan Neville from Symantec/Broadcom joins Dave Bittner on this episode to discuss Antlion, a Chinese state-backed hacker group using custom backdoors to target financial institutions in Taiwan.

Lazarus Targets Chemical Sector With 'Dream Jobs,' Then Trojans

Chemical companies are the latest to be targeted by the well-known North Korean group, which has targeted financial firms, security researchers, and technology companies in the past.

APT targets orgs as part of coordinated espionage campaign

Today, the Symantec Threat Hunter Team released a blog post reporting that it had observed an APT group orchestrating an espionage campaign to target organizations within the chemical sector.

Prepare for Armageddon: Ukraine’s tactic against Russian hackers

For years, a small and disparate Ukrainian team including IT experts, intelligence officers and a criminal prosecutor has kept a wary eye on a group of hackers nicknamed Armageddon.

Crypto Enthusiast Sentenced to 5 Years for North Korea Trip

He went to North Korea to spread the gospel of crypto. The FBI saw it as someone breaking sanctions and helping North Korea stash its money.

Broadcom: Software As A Sustainable Revenue

In this analysis, we analyzed Broadcom’s infrastructure software business segment, which consists of its CA Technologies, Brocade, and Symantec Enterprise Security acquisitions.

How do China's cyber-spies snoop on governments, NGOs? Probably like this

A China-backed crew is said to be running a global espionage campaign against governments, religious groups, and NGOs by possibly exploiting a vulnerability in Microsoft Exchange servers.

These sneaky hackers hid inside their victims' networks for nine months

A hacking and cyber espionage operation is going after victims around the world in a widespread campaign designed to snoop on targets and steal information.

The Rise of Symantec by Broadcom

Don’t rule them out yet! Symantec by Broadcom is still a force to be reckoned with!

Mutating Verblecon malware in illicit cryptomining ... so far

Internet fiends are using a relatively new piece of a malicious code dubbed Verblecon to install cryptominers on infected computers.

The breakdown of Shuckworm's continued cyber attacks against Ukraine.

Guest Dick O'Brien from Symantec joins Dave Bittner on this episode to discuss how "Shuckworm Continues Cyber-Espionage Attacks Against Ukraine."

Inside Ukraine’s online defence: the battle against Moscow’s cyber attacks

Kyiv was well prepared to counter early digital skirmishes but officials fear a bigger Russian offensive.

Beware of QR Code Scams

It’s so easy to click on a QR code. Criminals are counting on it.

Webroot vs. Symantec: Endpoint security software comparison

Symantec Endpoint Protection and Webroot Internet Security Plus 2022 are compelling security products intended to protect business systems. Learn the pros and cons of each security solution.

Webroot vs. Symantec: Endpoint security software comparison

Symantec Endpoint Protection and Webroot Internet Security Plus 2022 are compelling security products intended to protect business systems. Learn the pros and cons of each security solution.

That COVID passport app may put your privacy at risk

Even though the world’s attention has shifted to Ukraine, the COVID-19 pandemic is still a matter of concern. Millions of people have stood in line to get their vaccinations and issued a certificate.

That COVID passport app may put your privacy at risk

Even though the world’s attention has shifted to Ukraine, the COVID-19 pandemic is still a matter of concern. Millions of people have stood in line to get their vaccinations and issued a certificate.

Your COVID-19 digital passport might be a security risk

The digital COVID-19 vaccine passport on your smartphone may be sharing more information than you think, said researchers at Symantec.

Symantec tracked down one developer of ‘China’s most advanced piece of malware’

Researchers at Broadcom's Symantec, who detailed "China's most advanced piece of malware" on the last day of February, believe they have tracked down the pseudonym of one of its developers.

Security and tech pros are finding ways to help people in Ukraine

As war grips Ukraine, the world is scrambling to find ways to help. While governments impose sanctions, ordinary people are flooding donations to organisations and we have seen a tech element to this.

Your COVID-19 digital passport might be a security risk

The digital COVID-19 vaccine passport on your smartphone may be sharing more information than you think, said researchers at Symantec.

Symantec tracked down one developer of ‘China’s most advanced piece of malware’

Researchers at Broadcom's Symantec, who detailed "China's most advanced piece of malware" on the last day of February, believe they have tracked down the pseudonym of one of its developers.

Security and tech pros are finding ways to help people in Ukraine

As war grips Ukraine, the world is scrambling to find ways to help. While governments impose sanctions, ordinary people are flooding donations to organisations and we have seen a tech element to this.

DORA's Global Reach and Why Enterprises Need to Prepare

A new cybersecurity regulation is coming to the European financial services sector, and its authority will be felt worldwide.

DORA's Global Reach and Why Enterprises Need to Prepare

A new cybersecurity regulation is coming to the European financial services sector, and its authority will be felt worldwide.

How China built a one-of-a-kind cyber-espionage behemoth to last

The “most advanced piece of malware” that China-linked hackers have ever been known to use was revealed today. Dubbed Daxin, the stealthy back door was used in espionage operations.

Stealthy Daxin is China’s ‘most advanced piece of malware’

New malware attributed to China — more technologically advanced, stealthy and long-lasting than any seen before from the country — is challenging the orthodoxy of Chinese threat intelligence.

Researchers Warn of Stealthy Chinese Backdoor Targeting Multiple Foreign Agencies

A stealthy backdoor program used by China-linked threat actors has targeted government computers at multiple foreign agencies, allowing attackers to retain a presence on sensitive networks.

New Chinese hacking tool found, spurring U.S. warning to allies

Security researchers with U.S. cybersecurity firm Symantec said they have discovered a “highly sophisticated” Chinese hacking tool that has been able to escape public attention for more than a decade.

Ukraine computers hit by data-wiping software as Russia launched invasion

A newly discovered piece of destructive software found circulating in Ukraine has hit hundreds of computers, part of an intensifying wave of hacks aimed at the country.

Cyberattacks accompany Russian military assault on Ukraine

Cyberattacks against Ukrainian government websites and affiliated organizations added to the confusion of Russia’s military assault Thursday, including data-wiping malware activated a day earlier.

Digital Sleuths Track Clues in Hacks on Ukrainian Government, Banks

As missiles landed in Ukraine on Thursday morning, the country’s cybersecurity defenders were already hard at work. Prior to the Russian military invasion, hackers had launched a series of attacks.

Key Ukrainian government websites hit by series of cyberattacks

Key Ukrainian government websites were down early Thursday morning local time following a day in which Ukrainian agencies dealt with multiple cyberattacks.

Malware Detected in Ukraine as Invasion Threat Looms

A new form of destructive malware that can delete or corrupt data on a targeted computer or network has been seen spreading in Ukraine, according to multiple cybersecurity firms.

A SWIFT Getaway

In 2016, thieves pulled off one of the biggest bank heists in history without even cracking a safe. A hacking team known as "The Lazarus Group" tried to steal nearly a billion dollars from the Bank ...

Listen Now

Chinese Hackers Target Taiwanese Financial Institutions with a new Stealthy Backdoor

A Chinese advanced persistent threat (APT) group has been targeting Taiwanese financial institutions as part of a "persistent campaign" that lasted for at least 18 months.

China-Linked Group Attacked Taiwanese Financial Firms for 18 Months

The Antlion group, also known as Pirate Panda and Tropic Trooper, has shifted to targeting mainly Taiwan, using custom backdoors against financial organizations.

Microsoft, Symantec Share Notes on Russian Hacks Hitting Ukraine

Threat hunters at Symantec are sharing notes on a barrage of new cyberespionage attacks from Russia’s spy agency hitting organizations in Ukraine.

Arrow Electronics lands 'exclusive' pan-European cybersecurity deal with Broadcom

Arrow Electronics has announced a new agreement with Broadcom to be the exclusive cybersecurity distributor for the Symantec software portfolio across its European SMB market.

Arrow Electronics secures cybersecurity aggregator deal with Broadcom

Global technology provider Arrow Electronics has announced a new agreement with Broadcom Inc., which sees it become the exclusive cybersecurity aggregator for Symantec’s software portfolio.

Russian 'Gamaredon' hackers use 8 new malware payloads in attacks

The Russia-linked hackers known as 'Gamaredon' (aka Armageddon or Shuckworm) were spotted deploying eight custom binaries in cyber-espionage operations against Ukrainian entities.

Report Details Russian Cyberespionage Efforts in Ukraine

In a report published Monday, Symantec's Threat Hunter Team outlines a specific Russian cyberespionage campaign conducted on a Ukrainian network in 2021.

Arrow signs exclusive pan-European deal with Symantec

Arrow has signed an exclusive pan-European deal with Symantec, making it the sole distributor for the cybersecurity vendor’s solutions for SMB partners across the UK and 15 other European countries.

What chip shortage? Semiconductor revenue reached new heights in 2021, says Gartner

Despite demand continuing to outpace supply, or perhaps because of it, industry revenue grew by 25% in 2021 to top $500 billion for the first time.

Ukraine Attacks Involved Exploitation of Log4j, October CMS Vulnerabilities

In a two-page “insights” document published on Tuesday, CISA advised all organizations — regardless of their size or sector — to immediately implement steps to reduce the likelihood of damaging ...

Symantec Secure Access Cloud review

Symantec Secure Access Cloud is a highly flexible and accessible solution that helps you cope with the changing paradigm shift in the world of information security.

US Cyber Command Links 'MuddyWater' Hacking Group to Iranian Intelligence

The U.S. Cyber Command (USCYBERCOM) on Wednesday officially confirmed MuddyWater's ties to the Iranian intelligence apparatus…

Deal or No Deal, Both Work for Broadcom

It took a while, but the market finally seems to have come back around on Broadcom.

Global IT services provider Inetum hit by ransomware attack

Less than a week before the Christmas holiday, French IT services company Inetum Group was hit by a ransomware attack that had a limited impact on the business and its customers.

Canadian propane distributor hit by ransomware, and more

I told you about the ALPHV/BlackCat ransomware. A new report from Symantec, which calls this strain Noberus, looks deeper into the code.

Sophisticated Noberus Ransomware First to Be Coded in Rust

Symantec researchers have analyzed what appears to be the first ransomware family written in the Rust programming language.

Original Fix for Log4j Flaw Fails to Fully Protect Against DoS Attacks, Data Theft

Security experts are now urging organizations to quickly update to a new version of the Log4j logging framework that the Apache Foundation released Tuesday…

Telecom operators targeted in recent espionage hacking campaign

Researchers have spotted a new espionage hacking campaign targeting telecommunication and IT service providers in the Middle East and Asia.

Iranian APT Targets Middle East Telecoms Operators in Espionage Campaign

A cyberespionage campaign targeting telecoms operators, IT services organizations, and a utility company in the Middle East and other parts of Asia has been linked…

Suspected espionage campaign targets telecoms, IT service firms in Middle East

Hackers targeted a string of telecommunication operators and IT service organizations in the Middle East and Asia over the last six months, according to research published Tuesday.

North America 2022: Ransomware, tech talent and 5G

After a string of supply chain attacks, the trend is expected to continue, impacting security policies, hiring, and tech adoption in 2022.

The Most Popular Holiday Online Scams—and How to Avoid Them

The holiday shopping season has officially begun. And as Americans ramp up their online purchasing, cybercriminals will do some shopping of their own—for victims.

Yanluowang Ransomware Targeting U.S. Financial Corporations

Security researchers with Symantec believe that the Yanluowang ransomware is operated by a threat actor that was previously affiliated to the FiveHands group.

New Ransomware Variant Could Become Next Big Threat

Enterprise security teams might want to add "Yanluowang" to the long and growing list of ransomware threats they need to watch out for.

Yanluowang Ransomware Now Targeting US Companies

A new ransomware family appears to be making the rounds. Symantec, a division of Broadcom Software, says it's found evidence of the Yanluowang ransomware being used against US companies…

Yanluowang Ransomware Tied to Thieflock Threat Actor

A threat actor previously tied to the Thieflock ransomware operation may now be using the emerging Yanluowang ransomware in a series of attacks against U.S. corporations, researchers have found.

Yanluowang ransomware operation matures with experienced affiliates

An affiliate of the recently discovered Yanluowang ransomware operation is focusing its attacks on U.S. organizations in the financial sector using BazarLoader malware in the reconnaissance stage.

Best Antivirus Software for Enterprise Security 2021

With the current importance of data, protection against data breaches has become key to the success of an enterprise.

North Korean Hackers Caught Snooping on China’s Cyber Squad

A real diplomat is one who can cut his neighbor’s throat without having his neighbor notice it, Trygve Lie, former secretary-general of the United Nations, once allegedly said.

Broadcom and Software: What Are The 'Synergies'?

Broadcom (ticker “AVGO”), a semiconductor giant that dominates chips for networking equipment, stunned the Street three years ago when it bought venerable mainframe software maker CA,...

Broadcom Inc. Highlights Broadcom Software's Strategy and Solutions at Investor Day

Broadcom Inc. today held a Broadcom Software Investor Day, providing an in-depth overview of its infrastructure software and security software solutions.

Broadcom beats Wall Street expectations for Q3, touts success with Fortune 500 ties

The semiconductor and infrastructure software solutions giant laid out its plans for future success on Tuesday at its Software Investor Day…

Blackmatter ransomware gang says it's disbanding - again - after Ukraine arrests

A member of the BlackMatter (aka Darkside) ransomware gang has publicly claimed the extortionists are shutting down, causing much excitement within the infosec world.

BlackMatter Group Speeds Up Data Theft with New Tool

Security researchers have discovered a new data exfiltration tool designed to accelerate information theft for ransomware groups using the BlackMatter variant.

How consumer IoT devices can break your security

The Internet of Things was never conceived with the needs of enterprise security in mind. Then again, no one expected most of the world to leave their offices overnight and begin working from home.

How DevSecOps Adoption Can Help You Gain a Competitive Advantage

After a brutal year of cybersecurity attacks, IT professionals have become adamant about limiting their exposure to vulnerabilities in third-party software.

CrowdStrike vs. Symantec: Top EDR Solutions Compared

Buyers looking for an endpoint security solution often compare CrowdStrike and Symantec...

Fresh APT Harvester Reaps Telco, Government Data

A previously unseen advanced persistent threat (APT) group dubbed Harvester by researchers is attacking telcos, IT companies and government-sector targets in a campaign that’s been ongoing since June.

State-backed hackers breach telcos with custom malware

A previously unknown state-sponsored actor is deploying a novel toolset in attacks targeting telecommunication providers and IT firms in South Asia.

Broadcom named Google Cloud customer of year following collaboration

Broadcom is calling out its selection as Google Cloud Customer of the Year.

This new ransomware encrypts your data and makes some nasty threats, too

Cybercriminals are distributing a new form of ransomware in attacks against victims…

Broadcom Software's Symantec Threat Hunter Team discovers first-of-its-kind ransomware

The Symantec Threat Hunter Team at Broadcom Software has discovered what appears to be a brand new family of ransomware named after the Chinese deity that judges the souls of the dead.

Broadcom Awarded Customer of the Year by Google Cloud

Broadcom Inc. today announced that it has received the Google Cloud Customer of the Year Award.

How to Recover From a Ransomware Attack

First, we prepare a plan for the possibility, then when a ransomware attack occurs we execute the plan. So easy to say, so difficult to do correctly.

When Hackers Strike, It's Best Not to Pay Ransom, Expert Says

Cybercriminals disrupted the U.S. economy on an unprecedented scale this year...

To the Mountain Tops of AI and AT with Broadcom Cybersecurity Ambassador Kevin Haley

Philip sits down with Kevin Haley, the Director of Product Management for Symantec, A Division of Broadcom.

How to choose an endpoint protection suite

Studies show that CSO readers are most likely to know that endpoint protection is the modern iteration of the antivirus tools of previous generations.

The Benefits of Endpoint Detection and Response Tools in the Federal Government

Federal agencies are ramping up efforts to implement endpoint detection and response (EDR) systems as required by President Joe Biden’s May 12 executive order on cybersecurity.

Symantec: Staging activity observed on Exchange servers

Early ransomware staging signs have been spotted against Microsoft Exchange servers.

Symantec Data Loss Prevention Review & Best Alternatives

DLP software mitigates the risk of data leakage or data loss by monitoring, detecting, and blocking sensitive data while at rest (data that is not moving such as database, file share, etc.)...

Sidewalk Malware Tied to China-Linked Espionage Group

Security researchers have linked the recently discovered Sidewalk malware to Grayfly, an espionage group connected to China.

How Hackers Use Our Brains Against Us

The email from the boss asking to transfer money to a new supplier. The link sent from a client, but whose return email address is slightly off.

New LockFile Ransomware Variant Exploits "PetitPotam" Bug

Researchers are warning of a new ransomware variant spreading globally via exploitation of the “PetitPotam” vulnerability partially patched by Microsoft last week.

LockFile Ransomware Encrypting Domains Via Exchange Hack

A new ransomware operator is taking over Windows domains on networks around the world after exploiting a chain of Microsoft Exchange server vulnerabilities called ProxyShell.

Carrots - Not Sticks - Should Motivate Tech Investments

Investing in technology requires resources. And if it’s an emerging technology, devoting precious resources can ultimately prove unwise.

LockFile Ransomware Targets Microsoft Exchange Servers

Security researchers have discovered a new ransomware family called LockFile that appears to have been used to attack Microsoft Exchange servers in the US and Asia since at least July 20.

One big ransomware threat just disappeared. Now another one has jumped up to fill the gap

The sudden disappearance of one of the most prolific ransomware services has forced crooks to switch to other forms of ransomware, and one in particular has seen a big growth in popularity.

Ransomware Attacks and Payment Demands Soar

The only real question about ransomware trends these days is not whether there has been any let-up in the relentless pace of threat activity.

Hackers Target Critical Infrastructure in Southeast Asia

An unidentified hacking group with suspected China ties is targeting critical infrastructure in Southeast Asia.

China-Linked Cyberespionage Operation Suggests Interest in SCADA Systems

A cyberespionage group that appears to be based in China has been seen targeting critical infrastructure organizations in Southeast Asia.

Facebook says Iranian hackers used it to lure defense company employees

Iranian hackers used Facebook to create elaborate personas to try to get Americans in the defense and aerospace industries to fall for phishing schemes, the company said Thursday.

Ransomware has surged - Why the attacks are 'going crazy right now'

Ransomware cyberattacks have skyrocketed, and no part of the economy is safe.

Broadcom Pioneers Adaptive Protection to Maximize Endpoint Security

Broadcom Inc. today announced the launch of Adaptive Protection, an advanced capability as part of the Symantec Endpoint Security solution.

Broadcom to Drive More Deals Toward Partners

Broadcom this week announced it has revamped its global channel program for its software unit as part of an effort to create more services revenue opportunities for partners.

Broadcom Announces Expert Advantage Partner Program to Accelerate Software Growth

Broadcom Inc. today announced the launch of Expert Advantage, an expanded global channel services partner program, focused on customer success to drive growth across Broadcom Software solutions.

Broadcom Partners Get New Expert Advantage Program

Broadcom partners now have access to Expert Advantage, an expanded global channel services partner program to drive growth across Broadcom Software solutions.

Broadcom and Google Cloud Collaborate to Accelerate Digital Transformation for the Enterprise

Broadcom Inc. and Google Cloud today announced a strategic collaboration to accelerate innovation and strengthen cloud services integration within the core software franchises of Broadcom.

Broadcom moves its Symantec, CA software portfolios to Google Cloud

Broadcom will deliver its suite of Symantec and enterprise operations software including CA on Google Cloud.

Google Cloud, Broadcom Team Up on Enterprise Security

Google and Broadcom today announced a partnership that will make Broadcom’s enterprise security software available on Google Cloud Platform (GCP).

Broadcom and Google Cloud Collaborate to Accelerate Digital Transformation for the Enterprise

Broadcom Inc.and Google Cloud today announced a strategic collaboration to accelerate innovation and strengthen cloud services integration within the core software franchises of Broadcom.

Broadcom Picks Google Cloud To Host Core SaaS Offerings

Broadcom is moving its cloud-based security and enterprise operations software to Google Cloud and will leverage Google’s data cloud capabilities for its business-wide data and analytics strategy.

Broadcom to Migrate Security Solutions to Google Cloud Platform

Broadcom Inc. and Google Cloud today announced a strategic collaboration under which Broadcom will migrate its suite of security and enterprise operations software to Google Cloud platform.

Broadcom to Migrate Security Platforms to Google Cloud

Broadcom Inc. and Google announced today an alliance.

SideWalk Backdoor Linked to China-Linked Group 'Grayfly'

Grayfly campaigns have launched the novel malware against businesses in Taiwan, Vietnam, the US and Mexico and are targeting Exchange and MySQL servers.

Newsroom

Industry Voice: 'We're committed to VMware's partners' - Broadcom

Legitimate Software Abuse: A Disturbing Trend in Ransomware Attacks

CyberWire Daily Podcast - Episode 1813

3CX data breach shows organizations can’t afford to overlook software supply chain attacks

That 3CX supply chain attack keeps getting worse: Other vendors hit

Modified X_Trader software led to compromise of two critical infrastructure targets, Symantec says

Daggerfly APT Targets African Telecoms Firm With New MgBot Malware

Play Ransomware Attacks Utilize New Custom Tools

Play ransomware gang uses custom Shadow Volume Copy data-theft tool

Symantec Endpoint Security (SES)

Broadcom: Unlocking Value And Success For Partners

Broadcom’s Ganesh Janakiraman on Multicloud Challenges

APT group targeting organizations in Palestinian territories, researchers say

Arid Viper Hacking Group Using Upgraded Malware in Middle East Cyber Attacks

Blackfly flies back again.

Automatic Updates Deliver Malicious 3CX 'Upgrades' to Enterprises

North Korean Hackers Use Trojanized 3CX DesktopApp in Supply Chain Attacks

Hock Tan: Broadcom-VMware ‘A Win-Win-Win’ for Channel Partners, Buyers

Opinion: These tech giants stand to win by helping companies use AI to cut costs and automate

Coding for the future of U.S. national defense

Leadership Legend: Hock Tan, President and CEO of Broadcom

International Women's Day 2023: Here's How 10 Influential Channel Chiefs Describe Their Channel Philosophy

China's BlackFly Targets Materials Sector in 'Relentless' Quest for IP

Taking the risk out of the semiconductor supply chain

A Year Into Russia's Invasion of Ukraine, We're Still Bracing for a Massive Cyberwar

Hydrochasma Threat Group Bombards Targets With Slew of Commodity Malware, Tools

New Hacking Cluster 'Clasiopa' Targeting Materials Research Organizations in Asia

Unanswered Questions Cloud the Recent Targeting of an Asian Research Org

New attack group focuses on Asian medical and shipping companies

What we've learned from a year of Russian cyberattacks in Ukraine

Hackers backdoor Microsoft IIS servers with new Frebniis malware

Researchers unearth Windows backdoor that’s unusually stealthy

Broadcom CEO: VMware Partners ‘Will Remain Essential’ After Purchase

New Info-Stealer Discovered as Russia Prepares Fresh Offensive

Russian ‘WhisperGate’ hackers are using new data-stealing malware to target Ukraine

Ransomware attack on ION Trading shows markets' vulnerability to hackers

2023 Channel Chiefs: The 50 Most Influential

Building a broader IT modernization strategy

Are The EU Concerns With Broadcom’s VMware Deal Justified?

The fight for the airwaves in your house

Billbug infests government agencies

When Employees Leave, Sensitive Data Often Leaves With Them

Bluebottle Continues Bank Heist Assault With Signed Malware

French-speaking cybercriminals continue attacks on African banks

Why enterprises need to tame IT complexity [Q&A]

How AI cybersecurity tools tackle today's top threats

No, Broadcom And Hock Tan Aren’t Going To Raise Prices On VMware Products

No VMware Price Increases, SMB Neglect, Broadcom CEO Vows

Is It Time To Start Giving Broadcom’s Pending Acquisition Of VMware A Chance?

The Yanluowang ransomware group in their own words

China-Based Billbug APT Infiltrates Certificate Authority

How zero-trust architectures can prevent supply chain attacks

State-sponsored hackers in China compromise certificate authority

Chinese hackers target government agencies and defense orgs

India lifts download ban on VLC

IT Complexity Is Growing Issue Hindering Companies' Success

Broadcom + VMware: The Future of Enterprise IT is Multi-Cloud

Industry Voice: 'We're committed to VMware's partners' - Broadcom

This stealthy hacking campaign uses a new trick to deliver its malware

Espionage Hackers Use Microsoft IIS to Plant Malware

Burgeoning Cranefly hacking group has a new intel-gathering tool

Broadcom CEO: What the VMware merger will look like

BlackByte ransomware using custom data exfiltration tool

BlackByte ransomware picks up where Conti and Sodinokibi left off

China-Linked Cyber-Espionage Team Homes In on Hong Kong Government Orgs

Hackers compromised Hong Kong govt agency network for a year

Hong Kong Government Organizations Were Compromised by Hacker for a Year

Disinformation Attacks Threaten US Midterm Elections

Noberus ransomware: evolving tactics.

BUDWORM THREAT GROUP ATTACKS REVEAL â€˜CHANGE IN FOCUSâ€™

Chinese-linked hackers targeted U.S. state legislature, researchers say

Windows Logo Weaponized By State-Backed Chinese APT10 Spies In Ongoing Attacks

Malware Found Hiding in a Windows Logo

Noberus Amps Its Tactics: How IT Leaders Can Keep Up with Evolving Ransomware

The Countdown to DORA

Colonial Pipeline ransomware group using new tactics to become more dangerous

Attackers Deploying Noberus Ransomware Update Tactics

ALPHV/BlackCat ransomware family becoming more dangerous

Experts fear LockBit spread after ransomware builder leaked