Cybersecurity News


Ethical Hackers Breach U.N., Access 100,000 Private Records

Ethical Hackers Breach U.N., Access 100,000 Private Records Researchers informed organization of a flaw that exposed GitHub credentials through the organization’s vulnerability disclosure program.
12 January 2021

Over-Sharer or Troublemaker? How to Identify Insider-Risk Personas

It's past time to begin charting insider risk indicators that identify risky behavior and stop it in its tracks.
12 January 2021

macOS malware used run-only AppleScripts to avoid detection for five years

The macOS.OSAMiner has been active since 2015, primarily infecting users in Asia.
12 January 2021

Post-Backlash, WhatsApp Spells Out Privacy Policy Updates

Post-Backlash, WhatsApp Spells Out Privacy Policy Updates WhatsApp aimed to clear the air about its updated privacy policy after reports of mandatory data sharing with Facebook drove users to Signal and Telegram in troves.
12 January 2021

Operation Spalax: Targeted malware attacks in Colombia

ESET researchers uncover attacks targeting Colombian government institutions and private companies, especially from the energy and metallurgical industries

The post Operation Spalax: Targeted malware attacks in Colombia appeared first on WeLiveSecurity

12 January 2021

Colombian energy, metal firms under fire in new Trojan attack wave

Threat actors have selected three different Trojans to conduct cyberespionage.
12 January 2021

Facebook targets “stop the steal” content ahead of Inauguration Day

Facebook is ramping up content moderation efforts with “new urgency.”
12 January 2021

Third malware strain discovered in SolarWinds supply chain attack

CrowdStrike, one of the two security firms formally investigating the hack, sheds some light on how hackers compromised the SolarWinds Orion app build process.
11 January 2021

Intel's New vPro Processors Aim to Help Defend Against Ransomware

The newest Intel Core vPro mobile platform gives PC hardware a direct role in detecting ransomware attacks.
11 January 2021

IoT Vendor Ubiquiti Suffers Data Breach

Cloud provider hosting "certain" IT systems attacked, company says.
11 January 2021

Aliens and UFOs: A Final Frontier for Social Engineers

Aliens and UFOs: A Final Frontier for Social Engineers The release of a CIA archive on UFOs is exactly the kind of headline-making event that phishing and scam actors long for.
11 January 2021

Millions of Social Profiles Leaked by Chinese Data-Scrapers

Millions of Social Profiles Leaked by Chinese Data-Scrapers A cloud misconfig by SocialArks exposed 318 million records gleaned from Facebook, Instagram and LinkedIn.
11 January 2021

Ubiquiti: Change Your Password, Enable 2FA

Ubiquiti, a major vendor of cloud-enabled Internet of Things (IoT) devices such as routers, network video recorders, security cameras and access control systems, is urging customers to change their passwords and enable multi-factor authentication. The company says an incident at a third-party cloud provider may have exposed customer account information and credentials used to remotely manage Ubiquiti gear.
11 January 2021

Ubiquiti tells customers to change passwords after security breach

Data for UI.com accounts was accessed in mysterious data breach.
11 January 2021

CES 2021: Intel adds ransomware detection capabilities at the silicon level

Intel 11th Gen Intel Core vPro CPUs with support for the Hardware Shield and TDT features will be able to detect ransomware attacks at the hardware level, many layers below antivirus software.
11 January 2021

Researcher Builds Parler Archive Amid Amazon Suspension

Researcher Builds Parler Archive Amid Amazon Suspension A researcher scraped and archived public Parler posts before the conservative social networking service was taken down by Amazon, Apple and Google.
11 January 2021

SolarWinds Hack Lessons Learned: Finding the Next Supply Chain Attack

The SolarWinds supply chain compromise won't be the last of its kind. Vendors and enterprises alike must learn and refine their detection efforts to find the next such attack.
11 January 2021

US Capitol Attack a Wake-up Call for the Integration of Physical & IT Security

How two traditionally disparate security disciplines can be united.
11 January 2021

Microsoft Sysmon adds support for detecting Process Herpaderping attacks

Sysmon 13.00, released today, can detect both Process Hollowing and Process Herpaderping attacks, giving system administrators an edge in detecting and debugging malware attacks.
11 January 2021

New Tool Sheds Light on AppleScript-Obfuscated Malware

The AEVT decompiler helped researchers analyze a cryptominer campaign that used AppleScript for obfuscation and will help reverse engineers focused on other Mac OS malware.
11 January 2021