Cybersecurity News
Microsoft releases one-click mitigation tool for Exchange Server hacks
Another tool is at the disposal of admins struggling to protect their systems.16 March 2021
DDoS's Evolution Doesn't Require a Security Evolution
They may have grown in sophistication, with more widespread consequences, yet today's distributed denial-of-service attacks can still be fought with conventional tools.
15 March 2021
Buffalo Public Schools Cancel Classes Due to Ransomware
The FBI is investigating the March 12 attack that disrupted the school system's phased reopening this week.15 March 2021
CISA Updates Microsoft Exchange Advisory to Include China Chopper
US officials warn organizations of China Chopper Web shells as new data sheds light on how the Exchange Server exploits have grown.15 March 2021
Cybersecurity Bug-Hunting Sparks Enterprise Confidence
A survey from Intel shows that most organizations prefer tech providers to have proactive security, but few meet security expectations.
15 March 2021
Cyberattacks See Fundamental Changes, A Year into COVID-19
A year after COVID-19 was officially determined to be a pandemic, the methods and tactics used by cybercriminals have drastically changed.
15 March 2021
Lookout Acquires SASE Cloud Provider CipherCloud
Deal signals a focus on the cloud for mobile security firm.15 March 2021
Paving the way: Inspiring Women in Payments - A Q&A featuring Cindy vanBree
She’s been recognized by U.S. agency heads for her award-winning contributions to national security. But, when Cindy vanBree retired from the Defense Aerospace sector after a long career, she wasn’t ready to stop working. In this edition of our blog, Cindy explains how she found continued success by following her passion into consultancy and why it’s never too late to start over again. In fact, in Cindy’s case, some careers even come full circle; through her continuing education, she will once again leverage her Defense Sector experience after having been recently certified as a Cybersecurity Maturity Model Certification (CMMC) Registered Practitioner.
15 March 2021
Google Warns Mac, Windows Users of Chrome Zero-Day Flaw
The use-after-free vulnerability is the third Google Chrome zero-day flaw to be disclosed in three months.
15 March 2021
Name That Toon: Something Seems Afoul
Dark Reading's March cartoon caption contest is here, along with a few new feathered friends.
15 March 2021
Google fails to quash Incognito mode user tracking, privacy lawsuit
The company may now have to fight against user privacy violation claims in court.15 March 2021
How to Choose the Right Cybersecurity Framework
Cybersecurity frameworks can help reduce your risk of supply chain attacks and increase your competitive advantage.15 March 2021
Verkada Breach Demonstrates Danger of Overprivileged Users
In re-evaluating supply chains, companies should classify vendors with super admin privileges to devices or backdoors as a significant threat.15 March 2021
WeLeakInfo Leaked Customer Payment Info
A little over a year ago, the FBI and law enforcement partners overseas seized WeLeakInfo[.]com, a wildly popular service that sold access to more than 12 billion usernames and passwords stolen from thousands of hacked websites. In an ironic turn of events, a lapsed domain registration tied to WeLeakInfo let someone plunder and publish account data for 23,000 people who paid to access the service with a credit card.15 March 2021
Hafnium’s China Chopper: a ‘slick’ and tiny web shell for creating server backdoors
Hafnium has been linked to recent attacks on Microsoft Exchange Server.15 March 2021
Microsoft investigates potential ties between partner security firm, Exchange Server attack code leak
Exploit tools used in widespread attacks reportedly are similar to PoC code privately distributed by Microsoft to vendors.15 March 2021
PayPal fraud: What merchants should know
From overpayment to shipping scams, what are some of the most common threats that merchants using PayPal should watch out for?
The post PayPal fraud: What merchants should know appeared first on WeLiveSecurity
15 March 2021
Sky Global CEO indicted over encrypted chat drug trafficking, calls allegations an 'outrage'
The executive says the indictment highlights the “vilification” of anyone “who takes a stance against unwarranted surveillance.”15 March 2021
Critical Security Hole Can Knock Smart Meters Offline
Unpatched Schneider Electric PowerLogic ION/PM smart meters are open to dangerous attacks.
12 March 2021
Microsoft Exchange Server Attacks: 9 Lessons for Defenders
Experts share their guidance for organizations running on-premise Exchange servers in the wake of rapidly spreading attacks.
12 March 2021
