Cybersecurity News
Credit card stealer discovered in social media buttons
Web skimmer (Magecart) gangs find a new ways to attack e-commerce stores and online shoppers.07 December 2020
Italian police arrest suspects in Leonardo military, defense data theft
A former employee and collaborator are accused of siphoning off sensitive information for almost two years.07 December 2020
NSA warns of Russian state-sponsored hackers exploiting VMWare vulnerability
Russian hackers are using a VMWare bug to plant web shells inside hacked networks and pivot to Microsoft ADFS servers from where they steal sensitive data.07 December 2020
Hackers leak data from Embraer, world's third-largest airplane maker
The Brazilian company was the victim of a ransomware attack last month, in November.06 December 2020
Kazakhstan government is intercepting HTTPS traffic in its capital
This marks the third time since 2015 that the Kazakh government is mandating the installation of a root certificate on its citizens' devices.06 December 2020
Ransomware hits helicopter maker Kopter
Data from Kopter's internal network has been published on the LockBit gang's blog, hosted on the dark web.05 December 2020
Ransomware gangs are now cold-calling victims if they restore from backups without paying
Tactic used since August by ransomware gangs like Sekhmet, Maze, Conti, and Ryuk.04 December 2020
Microsoft Cloud Security Exec Talks New Tech, WFH, Gamification
Gunter Ollman explains the benefits of CPSM technology, how IT security teams have evolved, and how the pandemic has shaped security.04 December 2020
Making Sense of the Security Sensor Landscape
Chris Calvert of Respond Software (now part of FireEye) outlines the challenges that reduce the efficacy of network security sensors.
04 December 2020
Kmart Hit by Egregor Ransomware
Egregor is also behind recent attacks on UbiSoft and Barnes & Noble.04 December 2020
High-Severity Chrome Bugs Allow Browser Hacks
Desktop versions of the browser received a total of eight fixes, half rated high-severity.
04 December 2020
Johnson & Johnson CISO: Healthcare orgs are seeing nation-state attacks every single minute of every single day
Johnson & Johnson is one of six COVID-19 research companies that have been recently targeted by North Korean state-sponsored hackers.04 December 2020
BECs and EACs: What's the Difference?
Email accounts are common targets for attack. Understanding how attack types differ is critical for successful defense.
04 December 2020
Week in security with Tony Anscombe
ESET researchers analyze Turla Crutch, Cybersecurity Trends 2021 report is out and how to stay safe when paying with your phone.
The post Week in security with Tony Anscombe appeared first on WeLiveSecurity
04 December 2020
Novel Online Shopping Malware Hides in Social-Media Buttons
The skimmer steals credit-card data, using steganography to hide in plain sight in seemingly benign images.
04 December 2020
Intel Doubles Down on Emerging Technologies for Sharing and Using Data Securely
Homomorphic encryption and federated learning could allow groups to share data and analysis while protecting the actual information.04 December 2020
VMware Rolls a Fix for Formerly Critical Zero-Day Bug
VMware has issued a full patch and revised the severity level of the NSA-reported vulnerability to "important."
04 December 2020
Flash Dies but Warning Signs Persist: A Eulogy for Tech's Terrible Security Precedent
Flash will be gone by the end of the year, but the ecosystem that allowed it to become a software security serial killer is ready to let it happen again.04 December 2020
IRS to Make ID Protection PIN Open to All
The U.S. Internal Revenue Service (IRS) said this week that beginning in 2021 it will allow all taxpayers to apply for an identity protection personal identification number (IP PIN), a single-use code designed to block identity thieves from falsely claiming a tax refund in your name. Currently, IP PINs are issued only to those who fill out an ID theft affidavit, or to taxpayers who've experienced tax refund fraud in previous years.04 December 2020
Vancouver Metro Disrupted by Egregor Ransomware
The attack, which prevented Translink users from using their metro cards or buying tickets at kiosks, is the second from the prolific threat group just this week.
04 December 2020