Cybersecurity News
Microsoft Releases Emergency Patch for 'PrintNightmare' Vuln
It organizations to immediately apply security update, citing exploit activity.07 July 2021
Suspected ‘Dr HeX’ Hacker Busted for 9 Years of Phishing
The unnamed suspect allegedly helped to develop carding and phishing kits with the aim of stealing customers' bank-card data.
07 July 2021
Security 101: The 'PrintNightmare' Flaw
A closer look at the printer software vulnerability - and what you can do about it.
07 July 2021
Fake Kaseya VSA Security Update Drops Cobalt Strike
Threat actors are planting Cobalt Strike backdoors by malspamming a bogus Microsoft update along with a SecurityUpdates.exe.
07 July 2021
Microsoft Issues Emergency Patch for Windows Flaw
Microsoft on Tuesday issued an emergency software update to quash a security bug that's been dubbed "PrintNightmare," a critical vulnerability in all supported versions of Windows that is actively being exploited. The fix comes a week ahead of Microsoft's normal monthly Patch Tuesday release, and follows the publishing of exploit code showing would-be attackers how to leverage the flaw to break into Windows computers.07 July 2021
Why I Love (Breaking Into) Your Security Appliances
David "moose" Wolpoff, CTO at Randori, discusses security appliances and VPNs and how attackers only have to "pick one lock" to invade an enterprise through them.
07 July 2021
Autonomous Security Is Essential if the Edge Is to Scale Properly
Service demands at the network edge mean customers need to get cost, performance, and security right.07 July 2021
The Kaseya ransomware attack: Everything we know so far
Updated: The latest major software supply chain hack has impacted more than 1,500 companies. Here is everything we know so far.07 July 2021
SideCopy cybercriminals use new custom Trojans in attacks against India's military
SideCopy imitates Sidewinder, poaching the same infection chains to deliver different malicious tools.07 July 2021
Cloud Cryptomining Swindle in Google Play Rakes in Cash
At least 25 apps have lured in tens of thousands of victims with the promise of helping them cash in on the cryptomining craze.
07 July 2021
Microsoft Releases Emergency Patch for PrintNightmare Bugs
The fix doesn’t cover the entire problem nor all affected systems however, so the company also is offering workarounds and plans to release further remedies at a later date.
07 July 2021
Suspected hacker Dr HeX arrested over cybercrime, bank fraud impacting thousands
Moroccan police tracked down the alleged criminal following an Interpol investigation.07 July 2021
Bandidos at large: A spying campaign in Latin America
ESET Research uncovers an active malicious campaign that uses new versions of old malware, Bandook, to spy on its victims
The post Bandidos at large: A spying campaign in Latin America appeared first on WeLiveSecurity
07 July 2021
UK Information Commissioner launches probe into private email use at Department of Health
Concerns were raised over claims Matt Hancock and Lord Bethell used private accounts to conduct government business.07 July 2021
Pro-Trump ‘Gettr’ Social Platform Hacked On Day One
The newborn platform was inundated by Sonic the Hedgehog-themed porn and had prominent users' profiles defaced. Next, hackers posted its user database online.
06 July 2021
Researchers Learn From Nation-State Attackers' OpSec Mistakes
Security researchers discuss how a series of simple and consistent mistakes helped them learn more about ITG18, better known as Charming Kitten.06 July 2021
Android Apps in Google Play Harvest Facebook Credentials
The apps all used an unusual tactic of loading a legitimate Facebook page as part of the data theft.
06 July 2021
Workers Careless in Sharing & Reusing Corporate Secrets
A new survey shows leaked enterprise secrets costs companies millions of dollars each year.06 July 2021
Kaseya ransomware attack: Everything you need to know
Updated: A ransomware gang is demanding a huge payment after a major software supply chain attack. Here is everything we know so far.06 July 2021
Western Digital Users Face Another RCE
Say hello to one more zero-day and yet more potential remote data death for those who can’t/won’t upgrade their My Cloud storage devices.
06 July 2021