Cybersecurity News


Emotet Campaign Restarts After Seven-Week Hiatus

Multiple security researchers note the return of an email campaign attempting to spread the malware, which is often used to drop the Ryuk ransomware and Trickbot banking Trojan.
22 December 2020

Microsoft Ups Security of Azure AD, Identity

A roundup of Microsoft's recent security news and updates that focus on protecting identity.
22 December 2020

Holiday Puppy Swindle Has Consumers Howling

Holiday Puppy Swindle Has Consumers Howling Those buying German Shepherd puppies for Bitcoin online are in for a ruff ride.
22 December 2020

Test

Test More than 45 million unique images, such as X-rays and MRI scans, are accessible to anyone on the Internet, security firm says.
22 December 2020

5 Email Threat Predictions for 2021

5 Email Threat Predictions for 2021 As domains get cheaper, account takeovers get easier, and cloud computing usage expands, email-borne attacks will take advantage.
22 December 2020

Prepare to Fight Upcoming Cyber-Threat Innovations

Cybercriminals are preparing to use computing performance innovations to launch new types of attacks.
22 December 2020

Law Enforcement Disrupts VPN Services Enabling Cybercrime

The United States and international partners shut down three bulletproof hosting services used to facilitate criminal activity.
22 December 2020

Tech Giants Lend WhatsApp Support in Spyware Case Against NSO Group

Tech Giants Lend WhatsApp Support in Spyware Case Against NSO Group Google, Microsoft, Cisco Systems and others want appeals court to deny immunity to Israeli company for its alleged distribution of spyware and illegal cyber-surveillance activities.
22 December 2020

Joker’s Stash Carding Site Taken Down, for Now

Joker’s Stash Carding Site Taken Down, for Now The underground payment-card data broker saw its blockchain DNS sites taken offline after an apparent law-enforcement effort.
22 December 2020

Security as Code: How Repeatable Policy-Driven Deployment Improves Security

The SaC approach lets users codify and enforce a secure state of application configuration deployment that limits risk.
22 December 2020

Patrick Wardle on Hackers Leveraging ‘Powerful’ iOS Bugs in High-Level Attacks

Patrick Wardle on Hackers Leveraging ‘Powerful’ iOS Bugs in High-Level Attacks Noted Apple security expert Patrick Wardle discusses how cybercriminals are stepping up their game in targeting Apple users with new techniques and cyberattacks.
22 December 2020

Law enforcement take down three bulletproof VPN providers

The three VPN services provided safe haven for cybercriminals to carry out ransomware attacks, web skimming operations, spearphishing, and account takeovers.
22 December 2020

Microsoft and McAfee headline newly-formed 'Ransomware Task Force'

The newly-founded Ransomware Task Force will work to put together a standard framework for dealing with ransomware attacks.
22 December 2020

Microsoft, Google, Cisco, and others file amicus brief in support of Facebook's NSO lawsuit

Tech giants show support for Facebook's legal case against spyware vendor NSO Group.
21 December 2020

Cisco, Intel, Deloitte Among Victims of SolarWinds Breach: Report

The Wall Street Journal identified 24 businesses so far that have downloaded the SolarWinds software infected with malicious code.
21 December 2020

Nosy Ex-Partners Armed with Instagram Passwords Pose a Serious Threat

Nosy Ex-Partners Armed with Instagram Passwords Pose a Serious Threat A survey of single people found almost a third are still logging into their ex’s social-media accounts, some for revenge.
21 December 2020

Smart Doorbell Disaster: Many Brands Vulnerable to Attack

Smart Doorbell Disaster: Many Brands Vulnerable to Attack Investigation reveals device sector is problem plagued when it comes to security bugs.
21 December 2020

NSA, CISA Warn of Attacks on Federated Authentication

While incident responders focus on attacks using SolarWinds Orion, government cyber defenders highlight other methods likely being used as well.
21 December 2020

Defending Against State and State-Sponsored Threat Actors

Defending Against State and State-Sponsored Threat Actors Saryu Nayyar of Gurucul discusses state and state-sponsored threat actors, the apex predators of the cybersecurity world.
21 December 2020

Partial lists of organizations infected with Sunburst malware released online

As security researchers dig through forensic evidence in the aftermath of the SolarWinds supply chain attack, victim names are slowly starting to surface.
21 December 2020