 Shrootless: macOS Vulnerability Found by Microsoft Allows Rootkit Installation: Addressed by Apple in October 2021, the vulnerability allows an attacker to install rootkits, deploy persistent malware, or overwrite system files. Read More MITRE, CISA Announce 2021 List of Most Common Hardware Weaknesses: The 2021 CWE Most Important Hardware Weaknesses list includes 12 types of vulnerabilities. Read More NSA, CISA Release 5G Cloud Security Guidance: The NSA and CISA have released cybersecurity guidance to help cloud providers and mobile network operators secure 5G cloud infrastructure. Read More HelpSystems Expands Shopping Spree With Digital Guardian Acquisition: HelpSystems expanded its year-long cybersecurity shopping spree with a new deal to acquire data loss prevention specialists Digital Guardian. Read More Massachusetts Health Network Hacked; Patient Info Exposed: A Worcester, Mass. health care network says someone hacked into its employee email system, potentially exposing the personal information of thousands of patients. Read More Russian Man Extradited to U.S. for Role in TrickBot Malware Development: Vladimir Dunaev, 38, of Russia, was extradited from South Korea to face charges for his role in the TrickBot operation. Read More 12 People Arrested Over Ransomware Attacks on Critical Infrastructure: Europol announces the arrests of 12 individuals suspected of launching cyberattacks on critical infrastructure using ransomware such as LockerGoga, MegaCortex and Dharma. Read More Ransomware Attack Hits PNG Finance Ministry: A cyberattack on Papua New Guinea's finance ministry briefly disrupted government payments and operations, officials said late Thursday. Read More Chrome 95 Update Patches Exploited Zero-Days, Flaws Disclosed at Tianfu Cup: Google has patched two more actively exploited Chrome vulnerabilities, as well as flaws that earned hackers $300,000 at a recent Chinese hacking contest. Read More India's Top Court Orders Probe Into Pegasus Snooping: India's Supreme Court on Wednesday ordered an independent investigation into the alleged government use of Pegasus spyware on journalists, opposition politicians and activists with the chief justice calling the implications "Orwellian". Read More FBI Publishes Indicators of Compromise for Ranzy Locker Ransomware: Ranzy Locker ransomware has been targeting businesses in the United States since late 2020, with more than 30 victims identified by July 2021. Read More Free Decryption Tools Available for Babuk, AtomSilo and LockFile Ransomware: Free decryption tools have been released by Avast for Babuk, AtomSilo and LockFile ransomware. Read More Critical GoCD Authentication Flaw Exposes Software Supply Chain: A highly-critical vulnerability in a popular open-source CI/CD solution can be exploited to hijack sensitive secrets for downstream supply chain attacks. Read Feature Scottish Cybersecurity Startup Unveils Versatile AI-Based Deception: Scotland-based cybersecurity startup Lupovis has introduced versatile AI-based deception technology and announced significant pre-seed funding. Read Feature Vendor-Neutral Initiative Sets Bare-Minimum Baseline for Security: Google is partnering with multiple big-tech partners on a Minimum Viable Secure Product baseline aimed at building a set of minimum security requirements for business applications and services. Read Feature Phishing Protection Provider SlashNext Raises $26 Million: The investment will help the company grow its customer acquisition and operations domestically and internationally. Read Feature Cisco Patches High-Severity DoS Vulnerabilities in ASA, FTD Software: Addressed as part of Cisco's October 2021 release of the Cisco ASA, FTD, and FMC Security Advisory Bundled publication, these bugs can be exploited remotely, some without authentication. Read Feature US Dismisses Assange Suicide Risk in Extradition Appeal: The United States urged two senior British judges on Wednesday to clear the extradition of WikiLeaks founder Julian Assange and reject a lower court's ruling that he is a suicide risk. Read Feature Dragos Becomes First Industrial Cybersecurity Unicorn After Raising $200 Million: Dragos has become the first industrial cybersecurity unicorn — with a valuation of $1.7 billion — after raising $200 million in Series D funding. Read Feature Ransomware Gang Claims to Have Stolen Data From National Rifle Association: A cybercrime group that uses the Grief ransomware claims to have stolen data from the National Rifle Association (NRA). Read More US Bans China Telecom Over National Security Concerns: The United States has banned China Telecom from operating in the country citing "significant" national security concerns, further straining already tense relations between the superpowers. Read More TransUnion Acquires Identity Security Company Sontiq for $638 Million: Credit reporting agency TransUnion is acquiring identity security solutions provider Sontiq for $638 million. Read More Washington Secretary of State Appointed CISA's Senior Election Security Lead: Washington Secretary of State Kim Wyman, the second woman to serve in this position in Washington's history, is considered an expert on elections and an experienced Secretary of State. Read More North Korean Hackers Targeting IT Supply Chain: Kaspersky: North Korean state-sponsored hacking group Lazarus was observed targeting an IT asset monitoring solution vendor. Read More | 
Comments
Post a Comment