Cybersecurity News
Sophos Acquires Capsule8 for Linux Server & Container Security
The deal was announced the same day ZeroFox bought Dark Web intelligence firm Vigilante as a wave of security M&A continues.07 July 2021
Critical Sage X3 RCE Bug Allows Full System Takeovers
Security vulnerabilities in the ERP platform could allow attackers to tamper with or sabotage victims' business-critical processes and to intercept data.
07 July 2021
MacOS Targeted in WildPressure APT Malware Campaign
Threat actors enlist compromised WordPress websites in campaign targeting macOS users.
07 July 2021
Are Security Attestations a Necessity for SaaS Businesses?
Are security attestations becoming business imperatives, or are they merely token additions on the list of regulatory requirements?
07 July 2021
Microsoft Releases Emergency Patch for 'PrintNightmare' Vuln
It organizations to immediately apply security update, citing exploit activity.07 July 2021
Suspected ‘Dr HeX’ Hacker Busted for 9 Years of Phishing
The unnamed suspect allegedly helped to develop carding and phishing kits with the aim of stealing customers' bank-card data.
07 July 2021
Security 101: The 'PrintNightmare' Flaw
A closer look at the printer software vulnerability - and what you can do about it.
07 July 2021
Fake Kaseya VSA Security Update Drops Cobalt Strike
Threat actors are planting Cobalt Strike backdoors by malspamming a bogus Microsoft update along with a SecurityUpdates.exe.
07 July 2021
Microsoft Issues Emergency Patch for Windows Flaw
Microsoft on Tuesday issued an emergency software update to quash a security bug that's been dubbed "PrintNightmare," a critical vulnerability in all supported versions of Windows that is actively being exploited. The fix comes a week ahead of Microsoft's normal monthly Patch Tuesday release, and follows the publishing of exploit code showing would-be attackers how to leverage the flaw to break into Windows computers.07 July 2021
Why I Love (Breaking Into) Your Security Appliances
David "moose" Wolpoff, CTO at Randori, discusses security appliances and VPNs and how attackers only have to "pick one lock" to invade an enterprise through them.
07 July 2021
Autonomous Security Is Essential if the Edge Is to Scale Properly
Service demands at the network edge mean customers need to get cost, performance, and security right.07 July 2021
The Kaseya ransomware attack: Everything we know so far
Updated: The latest major software supply chain hack has impacted more than 1,500 companies. Here is everything we know so far.07 July 2021
SideCopy cybercriminals use new custom Trojans in attacks against India's military
SideCopy imitates Sidewinder, poaching the same infection chains to deliver different malicious tools.07 July 2021
Cloud Cryptomining Swindle in Google Play Rakes in Cash
At least 25 apps have lured in tens of thousands of victims with the promise of helping them cash in on the cryptomining craze.
07 July 2021
Microsoft Releases Emergency Patch for PrintNightmare Bugs
The fix doesn’t cover the entire problem nor all affected systems however, so the company also is offering workarounds and plans to release further remedies at a later date.
07 July 2021
Suspected hacker Dr HeX arrested over cybercrime, bank fraud impacting thousands
Moroccan police tracked down the alleged criminal following an Interpol investigation.07 July 2021
Bandidos at large: A spying campaign in Latin America
ESET Research uncovers an active malicious campaign that uses new versions of old malware, Bandook, to spy on its victims
The post Bandidos at large: A spying campaign in Latin America appeared first on WeLiveSecurity
07 July 2021
UK Information Commissioner launches probe into private email use at Department of Health
Concerns were raised over claims Matt Hancock and Lord Bethell used private accounts to conduct government business.07 July 2021
Pro-Trump ‘Gettr’ Social Platform Hacked On Day One
The newborn platform was inundated by Sonic the Hedgehog-themed porn and had prominent users' profiles defaced. Next, hackers posted its user database online.
06 July 2021
Researchers Learn From Nation-State Attackers' OpSec Mistakes
Security researchers discuss how a series of simple and consistent mistakes helped them learn more about ITG18, better known as Charming Kitten.06 July 2021