Cybersecurity News
Gitpaste-12 Worm Widens Set of Exploits in New Attacks
The worm returned in recent attacks against web applications, IP cameras and routers.
15 December 2020
Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome
Mozilla Foundation releases Firefox 84 browser, fixing several flaws and delivering performance gains and Apple processor support.
15 December 2020
Medical Imaging Leaks Highlight Unhealthy Security Practices
More than 45 million unique images, such as X-rays and MRI scans, are accessible to anyone on the Internet, security firm says.15 December 2020
Microsoft and industry partners seize key domain used in SolarWinds hack
By seizing the domain, Microsoft and its partners hope to identify all victims, but are also preventing attackers from escalating intrusions in currently infected networks.15 December 2020
Medical scans of millions of patients exposed online
Other leaked data included a range of personal information such as names, addresses and personal healthcare information.
The post Medical scans of millions of patients exposed online appeared first on WeLiveSecurity
15 December 2020
45M Medical Imaging Files Left Accessible Online
A range of medical images, including X-rays and CT scans, were exposed on more than 2,140 unprotected servers, researchers report.15 December 2020
Nowhere to Hide: Don't Let Your Guard Down This Holiday Season
Harden your defenses to ensure that your holiday downtime doesn't become an open door for cyber threats.
15 December 2020
SolarWinds Hack Could Affect 18K Customers
The still-unfolding breach at network management software firm SolarWinds may have resulted in malicious code being pushed to nearly 18,000 customers, the company said in a legal filing on Monday. Meanwhile, Microsoft should soon have some idea which and how many SolarWinds customers were affected, as it recently took possession of a key domain name used by the intruders to control infected systems.15 December 2020
45 Million Medical Images Left Exposed Online
A six-month investigation by CybelAngel discovered unsecured sensitive patient data available for third parties to access for blackmail, fraud or other nefarious purposes.
15 December 2020
Agent Tesla Keylogger Gets Data Theft and Targeting Update
The infamous keylogger has shifted its targeting tactics and now collects stored credentials for less-popular web browsers and email clients.
15 December 2020
Millions of Unpatched IoT, OT Devices Threaten Critical Infrastructure
Industrial, factory and medical gear remain largely unpatched when it comes to the URGENT/11 and CDPwn groups of vulnerabilities.
15 December 2020
The Private Sector Needs a Cybersecurity Transformation
Cybersecurity must get to the point where it's equated with actually stopping an attack by identifying the methods the bad guys use and taking those methods away.15 December 2020
Ransomware and IP Theft: Top COVID-19 Healthcare Security Scares
From ransomware attacks that crippled hospitals, to espionage attacks targeting COVID-19 vaccine supply chain, Beau Woods discusses the top healthcare security risks.
15 December 2020
Academics turn RAM into WiFi cards to steal data from air-gapped systems
AIR-FI technique can send stolen data at speeds of up to 100 b/s to WiFi receivers at a distance of a few meters.15 December 2020
Pornhub suspends over 10 million videos to eradicate illegal content
Roughly 13.5 million videos hosted on Pornhub are now reduced to only 2.9 million.15 December 2020
18,000 Organizations Possibly Compromised in Massive Supply-Chain Cyberattack
Nation-state attackers used poisoned SolarWinds network management software updates to distribute malware; US government orders federal civilian agencies to immediately power down the technology.14 December 2020
Spotify Changes Passwords After Another Data Breach
This is the third breach in the past few weeks for the world’s most popular streaming service.
14 December 2020
Ex-Cisco Employee Convicted for Deleting 16K Webex Accounts
The insider threat will go to jail for two years after compromising Cisco's cloud infrastructure.
14 December 2020
DHS Among Those Hit in Sophisticated Cyberattack by Foreign Adversaries – Report
The attack was mounted via SolarWinds Orion, in a manual and targeted supply-chain effort.
14 December 2020
Microsoft Office 365 Credentials Under Attack By Fax ‘Alert’ Emails
Emails from legitimate, compromised accounts are being sent to numerous enterprise employees with the aim of stealing their O365 credentials.
14 December 2020