Cybersecurity News
Security Flaw Discovered In Peloton Equipment
The vulnerability could give attackers remote root access to the bike's tablet, researchers report.16 June 2021
Cars, Medicine, Electric Grids: Future Hackers Will Hit Much More Than Networks in an IT/OT Integrated World
Intelligent systems must include the right cybersecurity protections to prevent physical threats to operational technology.16 June 2021
Russian National Convicted on Charges Related to Kelihos Botnet
Oleg Koshkin was arrested in 2019 and faces a maximum penalty of 15 years in prison, the DoJ reports.16 June 2021
IKEA Fined $1.2M for Elaborate ‘Spying System’
A French court fined the furniture giant for illegal surveillance on 400 customers and staff.
16 June 2021
Is an Attacker Living Off Your Land?
Living-off-the-land attacks pose significant risks to organizations and, on top of that, are difficult to detect. Learn the basics about how these attacks operate and ways to limit their damage.
16 June 2021
Ransomware Poll: 80% of Victims Don’t Pay Up
Meanwhile, in a separate survey, 80 percent of organizations that paid the ransom said were hit by a second attack.
16 June 2021
Keeping Your Organization Secure When Dealing With the Unexpected
There's no way to anticipate every possible scenario, but the right approach to business continuity can help you respond effectively in any situation.16 June 2021
Takeaways from the Colonial Pipeline Ransomware Attack
Hank Schless, senior manager of security solutions at Lookout, notes basic steps that organizations can take to protect themselves as ransomware gangs get smarter.
16 June 2021
Euros-Driven Football Fever Nets Dumb Passwords
The top easy-to-crack, football-inspired password in a database of 1 billion unique, clear-text, breached passwords? You probably guessed it: "Football."
16 June 2021
Ukrainian Police Nab Six Tied to CLOP Ransomware
Authorities in Ukraine this week charged six people alleged to have been part of the CLOP ransomware group, a cybercriminal gang said to have extorted more than half a billion dollars from victims. Some of CLOP's victims this year alone include Stanford University Medical School, the University of California, and University of Maryland.16 June 2021
Billions of records belonging to CVS Health exposed online
The exposure is another example of misconfiguration that can impact security.16 June 2021
Don't Get Stymied by Security Indecision
You might be increasing cyber-risk by not actively working to reduce it.16 June 2021
5 Tips to Prevent and Mitigate Ransomware Attacks
Ransomware attacks are increasing in frequency, and the repercussions are growing more severe than ever. Here are 5 ways to prevent your company from becoming the next headline.
16 June 2021
Avaddon Ransomware Gang Evaporates Amid Global Crackdowns
Ransomware group releases decryptors for nearly 3,000 victims, forfeiting millions in payouts.
16 June 2021
Researchers: Booming Cyber-Underground Market for Initial-Access Brokers
Ransomware gangs are increasingly buying their way into corporate networks, purchasing access from 'vendors' that have previously installed backdoors on targets.
16 June 2021
Peloton Bike+ Bug Gives Hackers Complete Control
An attacker with initial physical access (say, at a gym) could gain root entry to the interactive tablet, making for a bevy of remote attack scenarios.
16 June 2021
OSINT 101: What is open source intelligence and how is it used?
OSINT can be used by anyone, both for good and bad ends – here’s how defenders can use it to keep ahead of attackers
The post OSINT 101: What is open source intelligence and how is it used? appeared first on WeLiveSecurity
16 June 2021
Facebook awards $30,000 bounty for exploit exposing private Instagram content
The bug allowed users to view content without following an account.16 June 2021
SEC settles with First American over massive leak of mortgage data, disclosure
First American has agreed to a penalty of close to half a million dollars.16 June 2021
Thousands of VMware vCenter Servers Remain Open to Attack Over the Internet
Three weeks after company disclosed two critical vulnerabilities in the workload management utility, many organizations have not patched the technology yet, security vendor says.15 June 2021