Cybersecurity News


Ransomware: To pay or not to pay? Legal or illegal? These are the questions …

Caught between a rock and a hard place, many ransomware victims cave in to extortion demands. Here’s what might change the calculus.

The post Ransomware: To pay or not to pay? Legal or illegal? These are the questions … appeared first on WeLiveSecurity

08 July 2021

Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours

Automation allowed a REvil affiliate to move from exploitation of vulnerable servers to installing ransomware on downstream companies faster than most defenders could react.
07 July 2021

Fake Android Apps Promise Cryptomining Services to Steal Funds

Researchers discover more than 170 Android apps that advertise cloud cryptocurrency mining services and fail to deliver.
07 July 2021

Sophos Acquires Capsule8 for Linux Server & Container Security

The deal was announced the same day ZeroFox bought Dark Web intelligence firm Vigilante as a wave of security M&A continues.
07 July 2021

Critical Sage X3 RCE Bug Allows Full System Takeovers

Critical Sage X3 RCE Bug Allows Full System Takeovers Security vulnerabilities in the ERP platform could allow attackers to tamper with or sabotage victims' business-critical processes and to intercept data.
07 July 2021

MacOS Targeted in WildPressure APT Malware Campaign

MacOS Targeted in WildPressure APT Malware Campaign Threat actors enlist compromised WordPress websites in campaign targeting macOS users.
07 July 2021

Are Security Attestations a Necessity for SaaS Businesses?

Are Security Attestations a Necessity for SaaS Businesses? Are security attestations becoming business imperatives, or are they merely token additions on the list of regulatory requirements?
07 July 2021

Microsoft Releases Emergency Patch for 'PrintNightmare' Vuln

It organizations to immediately apply security update, citing exploit activity.
07 July 2021

Suspected ‘Dr HeX’ Hacker Busted for 9 Years of Phishing

Suspected ‘Dr HeX’ Hacker Busted for 9 Years of Phishing The unnamed suspect allegedly helped to develop carding and phishing kits with the aim of stealing customers' bank-card data.
07 July 2021

Security 101: The 'PrintNightmare' Flaw

Security 101: The 'PrintNightmare' Flaw A closer look at the printer software vulnerability - and what you can do about it.
07 July 2021

Fake Kaseya VSA Security Update Drops Cobalt Strike

Fake Kaseya VSA Security Update Drops Cobalt Strike Threat actors are planting Cobalt Strike backdoors by malspamming a bogus Microsoft update along with a SecurityUpdates.exe.
07 July 2021

Microsoft Issues Emergency Patch for Windows Flaw

Microsoft on Tuesday issued an emergency software update to quash a security bug that's been dubbed "PrintNightmare," a critical vulnerability in all supported versions of Windows that is actively being exploited. The fix comes a week ahead of Microsoft's normal monthly Patch Tuesday release, and follows the publishing of exploit code showing would-be attackers how to leverage the flaw to break into Windows computers.
07 July 2021

Why I Love (Breaking Into) Your Security Appliances

Why I Love (Breaking Into) Your Security Appliances David "moose" Wolpoff, CTO at Randori, discusses security appliances and VPNs and how attackers only have to "pick one lock" to invade an enterprise through them.
07 July 2021

Autonomous Security Is Essential if the Edge Is to Scale Properly

Service demands at the network edge mean customers need to get cost, performance, and security right.
07 July 2021

The Kaseya ransomware attack: Everything we know so far

Updated: The latest major software supply chain hack has impacted more than 1,500 companies. Here is everything we know so far.
07 July 2021

SideCopy cybercriminals use new custom Trojans in attacks against India's military

SideCopy imitates Sidewinder, poaching the same infection chains to deliver different malicious tools.
07 July 2021

Cloud Cryptomining Swindle in Google Play Rakes in Cash

Cloud Cryptomining Swindle in Google Play Rakes in Cash At least 25 apps have lured in tens of thousands of victims with the promise of helping them cash in on the cryptomining craze.
07 July 2021

Microsoft Releases Emergency Patch for PrintNightmare Bugs

Microsoft Releases Emergency Patch for PrintNightmare Bugs The fix doesn’t cover the entire problem nor all affected systems however, so the company also is offering workarounds and plans to release further remedies at a later date.
07 July 2021

Suspected hacker Dr HeX arrested over cybercrime, bank fraud impacting thousands

Moroccan police tracked down the alleged criminal following an Interpol investigation.
07 July 2021

Bandidos at large: A spying campaign in Latin America

ESET Research uncovers an active malicious campaign that uses new versions of old malware, Bandook, to spy on its victims

The post Bandidos at large: A spying campaign in Latin America appeared first on WeLiveSecurity

07 July 2021