 Researchers Dive Into Equation Group Tool 'DoubleFeature': Check Point security researchers publish findings from a deep-dive into DoubleFeature, a component of the Equation Group's DanderSpritz post-exploitation framework. Read More Shutterfly Says Ransomware Attack Impacted Manufacturing: The company says credit card data, financial information, and social security numbers were not compromised in the incident. Read More Threat Actors Abuse MSBuild for Cobalt Strike Beacon Execution: Tasks designed to perform build operations have been abused for the execution of malicious code. Read More State Workers to Be Paid on Time Despite Ransomware Attack: State workers in West Virginia will be paid on time this week despite a ransomware attack that affected a software provider that helps manage the state's payroll system. Read More DuckDuckGo Signals Entry Into Desktop Browser Market: DuckDuckGo plans to ship a privacy-centric desktop browser built from scratch to compete with Google's Chrome and Microsoft's Edge. Read More High-Risk Flaw Haunts Apache Server: The Apache HTTP Server 2.4.52 is listed as urgent and CISA is calling on user to "update as soon as possible." Read More IT Services Firm Inetum Discloses Ransomware Attack: The company says the incident had only a limited impact on its operations. Read More Jackson Public Schools Ups Cybersecurity After Hacker Attack: The public school district in Mississippi's capital city is implementing new cybersecurity measures after hackers attacked its server last year. Read More Organizations Targeted With Babuk-Based Rook Ransomware: First spotted at the end of November, the malware appears compiled out of leaked Babuk code. Read More New Flaws Expose EVlink Electric Vehicle Charging Stations to Remote Hacking: Schneider Electric has patched several new vulnerabilities that expose its EVlink electric vehicle charging stations to remote hacking. Read More Albanian Prime Minister Apologizes Over Database Leak: Albania's prime minister on Thursday apologized for a big leak of personal records from a government database of state and private employees, which he said seems more like an inside job than a cyber attack. Read More NVIDIA, HPE Products Affected by Log4j Vulnerabilities: The two companies have confirmed that some of their products are using the vulnerable Log4j logging utility. Read More Several Critical Vulnerabilities Found in myPRO HMI/SCADA Product: A researcher has found several critical vulnerabilities in the myPRO HMI/SCADA product made by mySCADA. Read More Microsoft Office Patch Bypassed for Malware Distribution in Apparent 'Dry Run': Based on publicly available proof-of-concept code, the attack bypasses the patch for CVE-2021-40444 by enclosing malicious documents in RAR archives. Read More Five Eyes Nations Issue Joint Guidance on Log4j Vulnerabilities: The US, Canada, Australia, New Zealand and the UK have released a joint cybersecurity advisory with mitigation guidance for the recent Log4j vulnerabilities. Read More 400,000 Individuals Affected by Email Breach at West Virginia Healthcare Company: Patient data and other information potentially compromised during unauthorized access to Monongalia Health System emails. Read More Research: Simulated Phishing Tests Make Organizations Less Secure: A long-term phishing experiment at a 56,000-employee company ends with a caution around the use of simulated phishing lures in corporate security awareness training exercises. Read More Microsoft Confirms 'NotLegit' Azure Flaw Exposed Source Code Repositories: Researchers warn that the vulnerability has existed since September 2017 and has likely been exploited in the wild. Read More Ubisoft Confirms Unauthorized Access to 'Just Dance' User Data: French video game company Ubisoft this week confirmed that 'Just Dance' user data was compromised in a recent cybersecurity incident. Read More CISA Says No Federal Agencies Compromised in Log4Shell Attacks to Date: CISA says it's currently not aware of any confirmed breaches at federal agencies resulting from Log4Shell attacks. Read More Virginia Still Working to Fix Issues After Ransomware Attack: The information technology agency that serves Virginia's legislature is still working to fix problems caused by a ransomware attack earlier this month, a state official said Tuesday. Read More Targeted Links Used to Steal Tens of Millions in Global Scam Campaign: Scammers targeted tens of millions of users in 90 countries, stealing $80 million per month. Read More Poland Rejects Accusations of 'Political' Spyware Use: Poland on Tuesday rejected accusations that it had used Pegasus spying software for political ends after a top lawyer opposed to the current government said he had been targeted. Read More Chinese Government Punishes Alibaba for Not Telling It First About Log4Shell Flaw: Report: The Chinese government is punishing Alibaba because the company's cloud security team did not inform the government first about the Log4Shell vulnerability. Read More | 
Comments
Post a Comment