Cybersecurity News
Microsoft Reports 'DearCry' Ransomware Targeting Exchange Servers
Attackers have begun to deploy ransomware on Microsoft Exchange Servers compromised by the ProxyLogon exploits.12 March 2021
Just Released: Version 3.1 of the PCI PIN Security Standard
Today, the PCI SSC published a minor revision to the PCI PIN Security Requirements and Testing Procedures—also known as the PCI PIN Security Standard. Version 3.1 of the Standard includes clarifications and updates previously released via FAQs and bulletins and incorporates stakeholder feedback and comments received via a formal request for comment (RFC) period.
12 March 2021
Uber, Lyft to share data on drivers banned for sexual, physical assault
The measure may stop banned drivers from being able to jump between platforms.12 March 2021
The future of data privacy: confidential computing, quantum safe cryptography take center stage
IBM is working on future-proof encryption methods able to keep our data safe both in storage and active use.12 March 2021
Netflix weighs up crackdown on password sharing
Streaming service tests feature that asks viewers if they share household with subscriber
Netflix has begun testing a feature that asks viewers whether they share a household with a subscriber, in a move that could lead to crackdown on the widespread practice of sharing passwords among friends and family.
Some Netflix users are reported to have received a message asking them to confirm they live with the account owner by entering a code included in a text message or email sent to the subscriber.
Continue reading...12 March 2021
Netflix wants to stop you sharing your password
Many of us do it. Netflix is testing ways to restrict you from sharing your account details.12 March 2021
Microsoft Exchange Server hacks ‘doubling’ every two hours
A ransomware variant is now also leveraging the critical vulnerabilities.12 March 2021
F5 Networks Urges Customers to Update to New Versions of Its App Delivery Tech
F5 BIG-IP and BIG-IQ have multiple critical vulnerabilities that enable attackers to completely compromise systems.11 March 2021
Network Pivots, Patch Bypasses: Exploits Hit Hard in 2020
An analysis of 50 vulnerabilities finds a spectrum of risk, from widespread vulnerabilities exploited by a variety of attackers to serious issues that will likely be exploited in 2021.11 March 2021
Molson Coors Beer Operations Halted by Hack
No details yet disclosed on the cyberattack.11 March 2021
Does XDR Mark the Spot? 6 Questions to Ask
Extended detection and response technology goes well beyond endpoint management to provide visibility into networks, servers, cloud, and applications. Could it be the answer to your security challenges?
11 March 2021
Ransomware Attack Strikes Spain’s Employment Agency
Reports say that the agency in charge of managing Spain's unemployment benefits has been hit by the Ryuk ransomware.
11 March 2021
TrickBot Takes Over, After Cops Kneecap Emotet
TrickBot rises to top threat in February, overtaking Emotet in Check Point’s new index.
11 March 2021
Microsoft Exchange Server Exploit Code Posted to GitHub
The proof-of-concept tool, which contained exploits for two Exchange Server vulnerabilities, was quickly removed from GitHub.11 March 2021
NanoCore RAT Scurries Past Email Defenses with .ZIPX Tactic
A spam campaign hides a malicious executable behind file archive extensions.
11 March 2021
Microsoft Exchange Servers Face APT Attack Tsunami
At least 10 nation-state-backed groups are using the ProxyLogon exploit chain to compromise email servers, as compromises mount.
11 March 2021
Actionable Tips for Engaging the Board on Cybersecurity
Up your game with your company's board of directors to help them understand your cybersecurity priorities.11 March 2021
Linux Systems Under Attack By New RedXOR Malware
Researchers say the new RedXOR backdoor is targeting Linux systems with various data exfiltration and network traffic tunneling capabilities.
11 March 2021
FIN8 Resurfaces with Revamped Backdoor Malware
The financial cyber-gang is running limited attacks ahead of broader offensives on point-of-sale systems.
11 March 2021
5 Steps for Investigating Phishing Attacks
Phishing is a common and effective cybercrime tool, but even the most sophisticated threat actors make mistakes that you can leverage in your investigations.11 March 2021