Cybersecurity News
Mimecast Says SolarWinds Attackers Accessed its Source Code Repositories
But the amount of code downloaded is too little to be of any use, the email security vendor says in its latest update.17 March 2021
Cisco Plugs Security Hole in Small Business Routers
The Cisco security vulnerability exists in the RV132W ADSL2+ Wireless-N VPN Routers and RV134W VDSL2 Wireless-AC VPN Routers.
17 March 2021
Teen Behind Twitter Bit-Con Breach Cuts Plea Deal
The ‘young mastermind’ of the Twitter hack will serve three years in juvenile detention.
17 March 2021
RDP Attacks Persist Near Record Levels in 2021
A wave of attacks targeting Remote Desktop Protocol has continued throughout the pandemic as more employees continue to work from home.17 March 2021
CISA Issues Advisory on TrickBot Campaigns
US Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warn security teams to guard against the advanced Trojan malware.17 March 2021
CISA Urges Caution on Trickbot Campaigns
Advisory warns security teams to guard against advanced Trojan malware.17 March 2021
Teen Behind Twitter Hack Agrees to Three Years in Prison
Graham Ivan Clark was 17 when accused of the attack that targeted several high-profile Twitter accounts.17 March 2021
$4,000 COVID-19 ‘Relief Checks’ Cloak Dridex Malware
The American Rescue Act is the latest zeitgeisty lure being circulated in an email campaign.
17 March 2021
COVID, Healthcare Data & the Dark Web: A Toxic Stew
The growing treasure trove of healthcare data is proving irresistible -- and profitable -- to bad actors.17 March 2021
Mimecast: SolarWinds Attackers Stole Source Code
A new Mimecast update reveals the SolarWinds hackers accessed several "limited" source code repositories.
17 March 2021
State-sponsored Threat Groups Target Telcos, Steal 5G Secrets
Researchers say China-linked APTs lure victims with bogus Huawei career pages in what they dub ‘Operation Diànxùn’.
17 March 2021
Fintech Giant Fiserv Used Unclaimed Domain
If you sell Web-based software for a living and ship code that references an unregistered domain name, you are asking for trouble. But when the same mistake is made by a Fortune 500 company, the results can range from costly to disastrous. Here's the story of one such goof committed by Fiserv [NASDAQ:FISV], a $6 billion firm that provides online banking software and other technology solutions to thousands of financial institutions.17 March 2021
Enterprises Wrestle With Executive Social Media Risk Management
Survey indicates enterprises have a lot of work to do reduce cybersecurity risks around executive social media use.17 March 2021
7 Tips to Secure the Enterprise Against Tax Scams
Tax season is yet another opportunity for fraudsters to target your company. Here's how to keep everyone in the organization on their toes.
17 March 2021
A New Paradigm in Data Security: Insider Risk Management
Insider Risk Management builds a framework around the new paradigm of "risk tolerance," aiming to give security teams the visibility and context around data activity to protect that data, without putting rigid constraints on users.
17 March 2021
‘Bit-Con’ Twitter teen hacker accepts plea agreement, three years behind bars
The teenager was responsible for breaking into the accounts of Elon Musk, Bill Gates, and others to tout a Bitcoin scam.17 March 2021
Coalition raises $175 million to boost cyber insurance offerings
The company says it is now valued at $1.75 billion.17 March 2021
FBI warns of rise in PYSA ransomware operators targeting US, UK schools
Data is being stolen ahead of encryption in extortion attempts.17 March 2021
Recorded Future acquires Gemini Advisory in $52 million deal
The company will leverage the purchase to carve a place in the fraud analytics market.17 March 2021
Can We Stop Pretending SMS Is Secure Now?
SMS text messages were already the weakest link securing just about anything online, mainly because there are tens of thousands of people (many of them low-paid mobile store employees) who can be tricked or bribed into swapping control over a mobile phone number to someone else. Now we're learning about an entire ecosystem of companies that anyone could use to silently intercept text messages intended for other mobile users.16 March 2021