Results for: ransomware

The SOC case files
The SOC case files: RansomHub exploits FortiGate bug in attack blocked by XDR

The SOC case files: RansomHub exploits FortiGate bug in attack blocked by XDR

Barracuda’s Managed XDR team recently contained a determined and complex attack by a ransomware gang. The attackers had been trying to find a way into a manufacturing company’s network since December 2024 and finally succeeded by exploiting an exposed firewall...

/ April 2, 2025
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: Critical NetApp SnapCenter vulnerability

Cybersecurity Threat Advisory: Critical NetApp SnapCenter vulnerability

NetApp SnapCenter disclosed a critical security vulnerability, identified as CVE-2025-26512. This flaw enables authenticated users to escalate their privileges and gain unauthorized administrative access upon successful exploitation. Continue reading this Cybersecurity Threat Advisory to learn more about this vulnerability and...

/ March 28, 2025
backup
World Backup Day turns 14

World Backup Day turns 14

On March 23 2011, a Redditor proposed a “Back-Up Day” to a community full of tech enthusiasts. “I just think it would be for the good of everyone to have a reminder to save all your cherished pictures, videos and...

/ March 26, 2025
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: RCE vulnerability in Veeam Backup & Replication

Cybersecurity Threat Advisory: RCE vulnerability in Veeam Backup & Replication

A vulnerability, tracked as CVE-2025-23120, with a CVSS score of 9.9, has been discovered in Veeam Backup & Replication. This vulnerability can allow attackers to exploit the system and execute remote code on the Veeam Backup Server. Continue reading this...

/ March 26, 2025
PhaaS attacks
Threat Spotlight: A million PhaaS attacks in two months

Threat Spotlight: A million PhaaS attacks in two months

The first few months of 2025 saw a massive spike in phishing-as-a-service (PhaaS) attacks targeting organizations around the world, with more than a million attacks detected by Barracuda systems in January and February. The attacks were powered by several leading...

/ March 24, 2025 / 9 Comments
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: Critical AMI BMC vulnerability

Cybersecurity Threat Advisory: Critical AMI BMC vulnerability

AMI has disclosed a critical vulnerability, CVE-2024-54085, with a CVSS score of 10.0. This vulnerability allows attackers to gain remote access and execute malicious commands. Continue reading this Cybersecurity Threat Advisory to learn how to mitigate your risk. What is...

/ March 19, 2025
MSPs transportation
New MSP opportunity: Tapping into growing field of transportation cybersecurity

New MSP opportunity: Tapping into growing field of transportation cybersecurity

The transportation vertical is rapidly growing, yet it is often overlooked by managed service providers (MSPs). However, hackers have taken notice. From 2017 to 2022, transportation vertical experienced a 400 percent increase in cyberattacks, and the pace shows no sign...

/ March 18, 2025
Email Threat Radar – March 2025

Email Threat Radar – March 2025

Over the last month, Barracuda threat analysts identified several notable email-based threats targeting organizations around the world, including: Extortion attempts impersonating Clop ransomware New attacks by the evasive and highly adaptive LogoKit phishing platform A phishing campaign leveraging SVG image file attachments Attackers...

/ March 17, 2025 / 7 Comments
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: Critical VMware vulnerabilities exploited

Cybersecurity Threat Advisory: Critical VMware vulnerabilities exploited

Three critical vulnerabilities (CVE-2025-22224, CVE-2025-22225, and CVE-2025-22226) are actively exploited, posing a significant threat to VMware virtualization environments. Review the details in this Cybersecurity Threat Advisory to learn how to mitigate your risks. What is the threat? These vulnerabilities present...

/ March 5, 2025
cybercrime economy
“Script Kiddies” get hacked—what it means about the cybercrime economy

“Script Kiddies” get hacked—what it means about the cybercrime economy

The discovery of a Trojan disguised as software to help low-skill hackers build XWorm RAT malware indicates the maturity and complexity of the thriving cybercrime economy—and it reminds us that there’s no honor among thieves. Imagine that you are an ambitious...

/ March 5, 2025