Cybersecurity News
Cryptologists Crack Zodiac Killer’s 340 Cipher
The Zodiac’s serial killer’s 340 cipher, which couldn’t be solved for 50 years, has been cracked by a remote team of mathematicians.
17 December 2020
3M Users Targeted by Malicious Facebook, Insta Browser Add-Ons
Researchers identify malware existing in popular add-ons for Facebook, Vimeo, Instagram and others that are commonly used in browsers from Google and Microsoft.
17 December 2020
Code42 Incydr Series: Bringing Shadow IT into the light with Code42 Incydr
The massive shift to remote work has turbocharged the shadow IT problem.
17 December 2020
Ad-blocker AdGuard deploys world's first DNS-over-QUIC resolver
DNS-over-QUIC, or DoQ, is viewed as a superior, faster, and more private version of the DNS protocol, even DoH and DoT.17 December 2020
VPNs, MFA & the Realities of Remote Work
The work-from-home-era is accelerating cloud-native service adoption.17 December 2020
This ‘off the shelf’ Tor backdoor malware is now a firm favorite with ransomware operators
SystemBC is making its mark as a popular tool used in high-profile ransomware campaigns.17 December 2020
IBM launches experimental homomorphic data encryption environment for the enterprise
Is it possible for fully homomorphic encryption to be a “game-changer” for data privacy? IBM intends to find out.17 December 2020
Operation SignSight: Supply‑chain attack against a certification authority in Southeast Asia
ESET researchers have uncovered a supply-chain attack on the website of a government in Southeast Asia.
The post Operation SignSight: Supply‑chain attack against a certification authority in Southeast Asia appeared first on WeLiveSecurity
17 December 2020
Phobos launches Orbital, a tool for finding attack pathways and entry points into your network
After months of work, teasing, and planning, Phobos Orbital is out of beta and available for trials.17 December 2020
Three million users installed 28 malicious Chrome or Edge extensions
Extensions could redirect users to ads, phishing sites, collect user data, or download malware on infected systems.16 December 2020
FireEye Identifies Killswitch for SolarWinds Malware as Victims Scramble to Respond
White House National Security Council establishes unified group to coordinate response across federal agencies to the threat.16 December 2020
Attackers Leverage IMAP to Infiltrate Email Accounts
Researchers believe cybercriminals are using a tool dubbed Email Appender to directly connect with compromised email accounts via IMAP.16 December 2020
FBI says DoppelPaymer ransomware gang is harassing victims who refuse to pay
FBI says ransomware group has been calling victims, threatening to send individuals to their homes if they don't pay the ransom.16 December 2020
New IRS Form Fraud Campaign Targets G Suite Users
At least 50,000 executives have been affected so far.16 December 2020
US-CERT Reports 17,447 Vulnerabilities Recorded in 2020
This marks the fourth year in a row that a record number of vulnerabilities has been discovered, following 17,306 in 2019.16 December 2020
Corporate Credentials for Sale on the Dark Web: How to Protect Employees and Data
It's past time to retire passwords in favor of other methods for authenticating users and securing systems.16 December 2020
Why the Weakest Links Matter
The recent FireEye and SolarWinds compromises reinforce the fact that risks should be understood, controls should be in place, and care should be taken at every opportunity.16 December 2020
Senior Managers Twice as Likely to Share Work Devices With Outsiders
New survey finds top C-suite managers are much shakier on security than their junior counterparts.
16 December 2020
Malicious Domain in SolarWinds Hack Turned into ‘Killswitch’
A key malicious domain name used to control potentially thousands of computer systems compromised via the months-long breach at network monitoring software vendor SolarWinds was commandeered by security experts and used as a "killswitch" designed to turn the sprawling cybercrime operation against itself, KrebsOnSecurity has learned.16 December 2020
Ryuk, Egregor Ransomware Attacks Leverage SystemBC Backdoor
In the past few months researchers have detected hundreds of attempted SystemBC deployments globally, as part of recent Ryuk and Egregor ransomware attacks.
16 December 2020