Blog
Threatpost
- BazarLoader Malware Abuses Slack, BaseCamp Clouds
Two cyberattack campaigns are making the rounds using unique social-engineering techniques. Read more » - iOS Kids Game Morphs into Underground Crypto Casino
A malicious ‘Jungle Run’ app tricked security protections to make it into the Apple App Store, scamming users out of money with a casino-like functionality. Read more » - NSA: 5 Security Bugs Under Active Nation-State Cyberattack
Widely deployed platforms from Citrix, Fortinet, Pulse Secure, Synacor and VMware are all in the crosshairs of APT29, bent on stealing credentials and more. Read more » - Mandiant Front Lines: How to Tackle Exchange Exploits
Matt Bromiley, senior principal consultant with Mandiant, offers checklists for how small- and medium-sized businesses (SMBs) can identify and clear ProxyLogon Microsoft Exchange infections. Read more » - Google Project Zero Cuts Bug Disclosure Timeline to a 30-Day Grace Period
The zero-day flaw research group has revised its disclosure of the technical details of vulnerabilities in the hopes of speeding up the release and adoption of fixes. Read more » - Biden Races to Shore Up Power Grid Against Hacks
A 100-day race to boost cybersecurity will rely on incentives rather than regulation, the White House said. Read more » - Gafgyt Botnet Lifts DDoS Tricks from Mirai
The IoT-targeted malware has also added new exploits for initial compromise, for Huawei, Realtek and Dasan GPON devices. Read more » - Attackers Target ProxyLogon Exploit to Install Cryptojacker
Threat actors targeted compromised Exchange servers to host malicious Monero cryptominer in an “unusual attack,” Sophos researchers discovered. Read more » - Security Bug Allows Attackers to Brick Kubernetes Clusters
The vulnerability is triggered when a cloud container pulls a malicious image from a registry. Read more » - Ransomware Attack Creates Cheese Shortages in Netherlands
Not a Gouda situation: An attack on a logistics firm is suspected to be related to Microsoft Exchange server flaw. Read more »
Powered by Custom News Feed
Healthcare Security News
- Attack on Codecov Affects Customers
Company Warns Clients' Information May Have Been ExfiltratedCodecov, a company that tests software code prior to release, has notified customers that attackers had access to its network for a month… Read more » - Facebook Tries to 'Scrape' Its Way Through Another BreachSocial Network Attempts 'Not Hacking' Spin on Theft of 533 Million Users' DetailsFacebook has been attempting to dismiss the appearance of a massive trove of user data by claiming it… Read more »
- How Fraudsters Nearly Stole $17.5 Million via PPE Fraud4 Dutch and Nigerian Suspects Accused of Scamming German Health AuthorityInterpol says Dutch and Nigerian suspects created a cloned version of a legitimate personal protective equipment provider's website to trick… Read more »
- Ireland’s Privacy Watchdog Launches GDPR Probe of FacebookData Protection Commission Sees Likely Violations in Wake of Latest Mega-BreachIreland's privacy regulator has launched an investigation into Facebook after personal information for 533 million of the social network's users… Read more »
- State of the Marketplace: A Conversation With Dave DeWaltDave DeWalt, former CEO of FireEye and McAfee, has been appointed vice chair of the board of LogDNA, a log management company, and he’s committed to the popular “shift left”… Read more »
- Going Beyond HIPAA to Protect Health Data PrivacyA proposed privacy framework from the eHealth Initiative & Foundation and the Center for Democracy and Technology aims to set standards for the collection, disclosure and use of health data… Read more »
- A Holistic Approach to Cybersecurity and ComplianceIn a joint interview, Mike Ferris and Mike Brooks of Abacode, a managed cybersecurity and compliance provider, discuss how the MCCP model helps businesses implement a holistic, framework-based cybersecurity program… Read more »
- Does FBI Exchange Remediation Action Set a Precedent?The latest edition of the ISMG Security Report features an analysis of whether the FBI removing malicious web shells from hundreds of compromised Microsoft Exchange Servers could set a precedent.… Read more »
Powered by Custom News Feed
Vulnerability Management
