 Chinese Spies Exploit Log4Shell to Hack Major Academic Institution: The attackers targeted a VMware Horizon instance affected by the recent Log4j vulnerability. Read More LastPass Automated Warnings Linked to 'Credential Stuffing' Attack: LastPass users are being urged to change master passwords and enable multi-factor authentication for all accounts. Read More Storage Devices of Major Vendors Impacted by Encryption Software Flaws: Storage devices from several major vendors are affected by vulnerabilities discovered by a researcher in a third-party encryption software they all use. Read More Another Remote Code Execution Vulnerability Patched in Log4j: Log4j developers have released an update to patch another remote code execution vulnerability, tracked as CVE-2021-44832. Read More Norwegian Media Firm Amedia Suffers Disruption Due to Cyberattack: The attack affected newspaper, advertisement, and subscription management systems. Read More Poland's Tusk Calls Spyware Use 'Crisis for Democracy': Polish opposition leader Donald Tusk on Tuesday said reports the government spied on its opponents represented the country's biggest "crisis for democracy" since the end of communism. Read More Researchers Dive Into Equation Group Tool 'DoubleFeature': Check Point security researchers publish findings from a deep-dive into DoubleFeature, a component of the Equation Group's DanderSpritz post-exploitation framework. Read More Threat Actors Abuse MSBuild for Cobalt Strike Beacon Execution: Tasks designed to perform build operations have been abused for the execution of malicious code. Read More State Workers to Be Paid on Time Despite Ransomware Attack: State workers in West Virginia will be paid on time this week despite a ransomware attack that affected a software provider that helps manage the state's payroll system. Read More Shutterfly Says Ransomware Attack Impacted Manufacturing: The company says credit card data, financial information, and social security numbers were not compromised in the incident. Read More DuckDuckGo Signals Entry Into Desktop Browser Market: DuckDuckGo plans to ship a privacy-centric desktop browser built from scratch to compete with Google's Chrome and Microsoft's Edge. Read More High-Risk Flaw Haunts Apache Server: The Apache HTTP Server 2.4.52 is listed as urgent and CISA is calling on user to "update as soon as possible." Read More IT Services Firm Inetum Discloses Ransomware Attack: The company says the incident had only a limited impact on its operations. Read More Jackson Public Schools Ups Cybersecurity After Hacker Attack: The public school district in Mississippi's capital city is implementing new cybersecurity measures after hackers attacked its server last year. Read More Organizations Targeted With Babuk-Based Rook Ransomware: First spotted at the end of November, the malware appears compiled out of leaked Babuk code. Read More New Flaws Expose EVlink Electric Vehicle Charging Stations to Remote Hacking: Schneider Electric has patched several new vulnerabilities that expose its EVlink electric vehicle charging stations to remote hacking. Read More Albanian Prime Minister Apologizes Over Database Leak: Albania's prime minister on Thursday apologized for a big leak of personal records from a government database of state and private employees, which he said seems more like an inside job than a cyber attack. Read More NVIDIA, HPE Products Affected by Log4j Vulnerabilities: The two companies have confirmed that some of their products are using the vulnerable Log4j logging utility. Read More Several Critical Vulnerabilities Found in myPRO HMI/SCADA Product: A researcher has found several critical vulnerabilities in the myPRO HMI/SCADA product made by mySCADA. Read More Microsoft Office Patch Bypassed for Malware Distribution in Apparent 'Dry Run': Based on publicly available proof-of-concept code, the attack bypasses the patch for CVE-2021-40444 by enclosing malicious documents in RAR archives. Read More Five Eyes Nations Issue Joint Guidance on Log4j Vulnerabilities: The US, Canada, Australia, New Zealand and the UK have released a joint cybersecurity advisory with mitigation guidance for the recent Log4j vulnerabilities. Read More 400,000 Individuals Affected by Email Breach at West Virginia Healthcare Company: Patient data and other information potentially compromised during unauthorized access to Monongalia Health System emails. Read More Research: Simulated Phishing Tests Make Organizations Less Secure: A long-term phishing experiment at a 56,000-employee company ends with a caution around the use of simulated phishing lures in corporate security awareness training exercises. Read More Microsoft Confirms 'NotLegit' Azure Flaw Exposed Source Code Repositories: Researchers warn that the vulnerability has existed since September 2017 and has likely been exploited in the wild. Read More | 
Comments
Post a Comment