Cybersecurity News
Emotet Campaign Restarts After Seven-Week Hiatus
Multiple security researchers note the return of an email campaign attempting to spread the malware, which is often used to drop the Ryuk ransomware and Trickbot banking Trojan.22 December 2020
Microsoft Ups Security of Azure AD, Identity
A roundup of Microsoft's recent security news and updates that focus on protecting identity.22 December 2020
Holiday Puppy Swindle Has Consumers Howling
Those buying German Shepherd puppies for Bitcoin online are in for a ruff ride.22 December 2020
Test
More than 45 million unique images, such as X-rays and MRI scans, are accessible to anyone on the Internet, security firm says.22 December 2020
5 Email Threat Predictions for 2021
As domains get cheaper, account takeovers get easier, and cloud computing usage expands, email-borne attacks will take advantage.22 December 2020
Prepare to Fight Upcoming Cyber-Threat Innovations
Cybercriminals are preparing to use computing performance innovations to launch new types of attacks.22 December 2020
Law Enforcement Disrupts VPN Services Enabling Cybercrime
The United States and international partners shut down three bulletproof hosting services used to facilitate criminal activity.22 December 2020
Tech Giants Lend WhatsApp Support in Spyware Case Against NSO Group
Google, Microsoft, Cisco Systems and others want appeals court to deny immunity to Israeli company for its alleged distribution of spyware and illegal cyber-surveillance activities.22 December 2020
Joker’s Stash Carding Site Taken Down, for Now
The underground payment-card data broker saw its blockchain DNS sites taken offline after an apparent law-enforcement effort.22 December 2020
Security as Code: How Repeatable Policy-Driven Deployment Improves Security
The SaC approach lets users codify and enforce a secure state of application configuration deployment that limits risk.22 December 2020
Patrick Wardle on Hackers Leveraging ‘Powerful’ iOS Bugs in High-Level Attacks
Noted Apple security expert Patrick Wardle discusses how cybercriminals are stepping up their game in targeting Apple users with new techniques and cyberattacks.22 December 2020
Law enforcement take down three bulletproof VPN providers
The three VPN services provided safe haven for cybercriminals to carry out ransomware attacks, web skimming operations, spearphishing, and account takeovers.22 December 2020
Microsoft and McAfee headline newly-formed 'Ransomware Task Force'
The newly-founded Ransomware Task Force will work to put together a standard framework for dealing with ransomware attacks.22 December 2020
Microsoft, Google, Cisco, and others file amicus brief in support of Facebook's NSO lawsuit
Tech giants show support for Facebook's legal case against spyware vendor NSO Group.21 December 2020
Cisco, Intel, Deloitte Among Victims of SolarWinds Breach: Report
The Wall Street Journal identified 24 businesses so far that have downloaded the SolarWinds software infected with malicious code.21 December 2020
Nosy Ex-Partners Armed with Instagram Passwords Pose a Serious Threat
A survey of single people found almost a third are still logging into their ex’s social-media accounts, some for revenge.21 December 2020
Smart Doorbell Disaster: Many Brands Vulnerable to Attack
Investigation reveals device sector is problem plagued when it comes to security bugs.21 December 2020
NSA, CISA Warn of Attacks on Federated Authentication
While incident responders focus on attacks using SolarWinds Orion, government cyber defenders highlight other methods likely being used as well.21 December 2020
Defending Against State and State-Sponsored Threat Actors
Saryu Nayyar of Gurucul discusses state and state-sponsored threat actors, the apex predators of the cybersecurity world.21 December 2020
Partial lists of organizations infected with Sunburst malware released online
As security researchers dig through forensic evidence in the aftermath of the SolarWinds supply chain attack, victim names are slowly starting to surface.21 December 2020