Cybersecurity News
Ransomware: To pay or not to pay? Legal or illegal? These are the questions …
Caught between a rock and a hard place, many ransomware victims cave in to extortion demands. Here’s what might change the calculus.
The post Ransomware: To pay or not to pay? Legal or illegal? These are the questions … appeared first on WeLiveSecurity
08 July 2021
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Automation allowed a REvil affiliate to move from exploitation of vulnerable servers to installing ransomware on downstream companies faster than most defenders could react.07 July 2021
Fake Android Apps Promise Cryptomining Services to Steal Funds
Researchers discover more than 170 Android apps that advertise cloud cryptocurrency mining services and fail to deliver.07 July 2021
Sophos Acquires Capsule8 for Linux Server & Container Security
The deal was announced the same day ZeroFox bought Dark Web intelligence firm Vigilante as a wave of security M&A continues.07 July 2021
Critical Sage X3 RCE Bug Allows Full System Takeovers
Security vulnerabilities in the ERP platform could allow attackers to tamper with or sabotage victims' business-critical processes and to intercept data.
07 July 2021
MacOS Targeted in WildPressure APT Malware Campaign
Threat actors enlist compromised WordPress websites in campaign targeting macOS users.
07 July 2021
Are Security Attestations a Necessity for SaaS Businesses?
Are security attestations becoming business imperatives, or are they merely token additions on the list of regulatory requirements?
07 July 2021
Microsoft Releases Emergency Patch for 'PrintNightmare' Vuln
It organizations to immediately apply security update, citing exploit activity.07 July 2021
Suspected ‘Dr HeX’ Hacker Busted for 9 Years of Phishing
The unnamed suspect allegedly helped to develop carding and phishing kits with the aim of stealing customers' bank-card data.
07 July 2021
Security 101: The 'PrintNightmare' Flaw
A closer look at the printer software vulnerability - and what you can do about it.
07 July 2021
Fake Kaseya VSA Security Update Drops Cobalt Strike
Threat actors are planting Cobalt Strike backdoors by malspamming a bogus Microsoft update along with a SecurityUpdates.exe.
07 July 2021
Microsoft Issues Emergency Patch for Windows Flaw
Microsoft on Tuesday issued an emergency software update to quash a security bug that's been dubbed "PrintNightmare," a critical vulnerability in all supported versions of Windows that is actively being exploited. The fix comes a week ahead of Microsoft's normal monthly Patch Tuesday release, and follows the publishing of exploit code showing would-be attackers how to leverage the flaw to break into Windows computers.07 July 2021
Why I Love (Breaking Into) Your Security Appliances
David "moose" Wolpoff, CTO at Randori, discusses security appliances and VPNs and how attackers only have to "pick one lock" to invade an enterprise through them.
07 July 2021
Autonomous Security Is Essential if the Edge Is to Scale Properly
Service demands at the network edge mean customers need to get cost, performance, and security right.07 July 2021
The Kaseya ransomware attack: Everything we know so far
Updated: The latest major software supply chain hack has impacted more than 1,500 companies. Here is everything we know so far.07 July 2021
SideCopy cybercriminals use new custom Trojans in attacks against India's military
SideCopy imitates Sidewinder, poaching the same infection chains to deliver different malicious tools.07 July 2021
Cloud Cryptomining Swindle in Google Play Rakes in Cash
At least 25 apps have lured in tens of thousands of victims with the promise of helping them cash in on the cryptomining craze.
07 July 2021
Microsoft Releases Emergency Patch for PrintNightmare Bugs
The fix doesn’t cover the entire problem nor all affected systems however, so the company also is offering workarounds and plans to release further remedies at a later date.
07 July 2021
Suspected hacker Dr HeX arrested over cybercrime, bank fraud impacting thousands
Moroccan police tracked down the alleged criminal following an Interpol investigation.07 July 2021
Bandidos at large: A spying campaign in Latin America
ESET Research uncovers an active malicious campaign that uses new versions of old malware, Bandook, to spy on its victims
The post Bandidos at large: A spying campaign in Latin America appeared first on WeLiveSecurity
07 July 2021