Cybersecurity News
Chinese APT Groups Continue to Pound Away on Pulse Secure VPNs
Security vendor says it has observed threat groups using a set of 16 tools specifically designed to attack Pulse Secure devices since April 2020.28 May 2021
Hackers Exploit Post-COVID Return to Offices
Spoofed CIO ‘pandemic guideline’ emails being used to steal credentials.
28 May 2021
Chart: Cloud Concerns
As more organizations make their way to the cloud, their eyes are wide open to the associated cybersecurity risks that tag along for the ride.
28 May 2021
Modern SOCs a 'Painful' Challenge Amid Growing Complexity: Report
A new study examines the tools and technologies driving investment and activities for security operations centers.28 May 2021
SolarWinds Attackers Impersonate USAID in Advanced Email Campaign
Microsoft shares the details of a wide-scale malicious email campaign attributed to Nobelium, the group linked to the SolarWinds supply chain attack.28 May 2021
A Wrench and a Screwdriver: Critical Infrastructure's Last, Best Lines of Defense?
Critical infrastructure's cybersecurity problems are complex, deep-rooted, and daunting. Addressing them won't be easy...but it isn't impossible.
28 May 2021
HPE Fixes Critical Zero-Day in Server Management Software
The bug in HPE SIM makes it easy as pie for attackers to remotely trigger code, no user interaction necessary.
28 May 2021
Siemens Patches Major PLC Flaw that Bypasses Its 'Sandbox' Protection
Researchers from Claroty today detailed the memory vuln they discovered in Siemens SIMATIC S7-1200 and S7-1500 PLCs.28 May 2021
Week in security with Tony Anscombe
You, too, may be vulnerable to SIM swap attacks – How to defend yourself against rom-cons – Zero day in macOS allowed malware to take secret screenshots
The post Week in security with Tony Anscombe appeared first on WeLiveSecurity
28 May 2021
Boss of ATM Skimming Syndicate Arrested in Mexico
Florian "The Shark" Tudor, the alleged ringleader of a prolific ATM skimming gang that has stolen hundreds of millions from tourists visiting Mexico over the past eight years, was arrested in Mexico City on Thursday in response to an extradition warrant from a Romanian court.28 May 2021
Plug-ins for Code Editors Pose Developer-Security Threat
There are two critical vulnerabilities in plug-ins for the popular Visual Studio Code editor, now patched, but security firm Snyk warns that popular plug-ins could put development environments in jeopardy.28 May 2021
Most Mobile Apps Can Be Compromised in 15 Minutes or Less
In the name of releasing apps quickly and delivering a smooth user experience, mobile app security is often given short shrift.28 May 2021
Nobelium Phishing Campaign Poses as USAID
Microsoft uncovered the SolarWinds crooks using mass-mail service Constant Contact and posing as a U.S.-based development organization to deliver malicious URLs to more than 150 organizations.
28 May 2021
Building Multilayered Security for Modern Threats
Justin Jett, director of audit and compliance for Plixer, discusses the elements of a successful advanced security posture.
28 May 2021
Researchers find four new malware tools created to exploit Pulse Secure VPN appliances
There are now at least 16 malware families designed to compromise Pulse Secure VPN products.28 May 2021
Targeted AnyDesk Ads on Google Served Up Weaponized App
Malicious ad campaign was able to rank higher in searches than legitimate AnyDesk ads.
27 May 2021
'Have I Been Pwned' Code Base Now Open Source
Founder Troy Hunt also announces the platform will receive compromised passwords the FBI finds in its investigations.27 May 2021
BazaLoader Attackers Create Fake Movie Streaming Site to Trick Victims
The BazaLoader infection chain includes a live call center and "customer service" from criminals, researchers report.27 May 2021
Acronis: Pandemic Hastened Cloud Migration, Prompting New Security Issues
SPONSORED: WATCH NOW -- The COVID-19 pandemic has accelerated an ongoing shift in data away from business data centers to home offices and the cloud, explains Candid Wuest, VP of cyber protection research for Acronis.27 May 2021
Let's Stop Blaming Employees for Our Data Breaches
Assuming employees want to steal trade secrets pits them against your security teams, creates stress and reduces productivity.27 May 2021