Cybersecurity News


Conti, DeadBolt Target Delta, QNAP

Conti, DeadBolt Target Delta, QNAP QNAP had to push out an unexpected (and not entirely welcome) NAS device update, and Delta Electronics' network has been crippled.
28 January 2022

Shlayer and Bundlore MacOS Malware Strains – How Uptycs EDR Detection Can Help

Shlayer and Bundlore MacOS Malware Strains – How Uptycs EDR Detection Can Help MacOS malware Shlayer and Bundlore may have variations, but the behavior of their attacks have not changed – attacking older macOS versions and poorly-protected websites.
28 January 2022

Who Wrote the ALPHV/BlackCat Ransomware Strain?

In December 2021, researchers discovered a new ransomware-as-a-service named ALPHV (a.k.a. "BlackCat"), considered to be the first professional cybercrime group to create and use a ransomware strain in the Rust programming language. In this post, we'll explore some of the clues left behind by the developer who was reputedly hired to code the ransomware variant.
28 January 2022

Silkworm security? Researchers create new authentication method using silk fibers

Academics say the material could be used to create unclonable physical components suitable for supporting digital security.
28 January 2022

Google Play app dropped Vultur banking Trojan on Android handsets

The app was installed thousands of times before it was removed.
28 January 2022

2FA App Loaded with Banking Trojan Infests 10K Victims via Google Play

2FA App Loaded with Banking Trojan Infests 10K Victims via Google Play The Vultur trojan steals bank credentials but asks for permissions to do far more damage down the line.
27 January 2022

BotenaGo Botnet Code Leaked to GitHub

BotenaGo Botnet Code Leaked to GitHub The malware had already put millions of routers and IoT devices at risk, and now any noob can have at it.
27 January 2022

PCI SSC in Brazil: New Regional Engagement Board for 2022

 

PCI SSC has announced a newly expanded Brazil Regional Engagement Board (REB). Here we talk with PCI SSC Associate Director, LA Region for Brazil, Carlos Caetano, about the value of the board, its role and agenda for 2022.

27 January 2022

Shipment-Delivery Scams a Fav Way to Spread Malware

Shipment-Delivery Scams a Fav Way to Spread Malware Attackers increasingly are spoofing the courier DHL and using socially engineered messages related to packages to trick users into downloading Trickbot and other malicious payloads.
27 January 2022

How to Secure Your SaaS Stack with a SaaS Security Posture Management Solution

How to Secure Your SaaS Stack with a SaaS Security Posture Management Solution SaaS Security Posture Management (SSPM) named a must have solution by Gartner. Adaptive Shields SSPM solution allows security teams full visibility and control.
27 January 2022

EyeMed agrees $600,000 settlement over 2020 data breach

The data of roughly 2.1 million individuals was exposed.
27 January 2022

DeepDotWeb operator sentenced to eight years behind bars

The platform provided links to Dark Web marketplaces.
27 January 2022

Beyond the tick box: What to consider before agreeing to a privacy policy

The trade-off between using a free service and giving up our personal data becomes much less palatable when we think about the wider ramifications of the collection and use of our personal data

The post Beyond the tick box: What to consider before agreeing to a privacy policy appeared first on WeLiveSecurity

27 January 2022

Konni remote access Trojan receives 'significant' upgrades

Researchers say the security community should keep a close eye on this malware strain.
27 January 2022

TrickBot Crashes Security Researchers’ Browsers in Latest Upgrade

TrickBot Crashes Security Researchers’ Browsers in Latest Upgrade The malware has added an anti-debugging tool that crashes browser tabs when researchers use code beautifying for analysis.
26 January 2022

Apple Fixes 2 Zero-Day Security Bugs, One Exploited in the Wild

Apple Fixes 2 Zero-Day Security Bugs, One Exploited in the Wild iOS 15.3 & iPadOS 15.3 fix the Safari browser flaw that could have spilled users’ browsing data, plus a zero day IOMobileFrameBuffer bug exploited in the wild.
26 January 2022

‘Dark Herring’ Billing Malware Swims onto 105M Android Devices

‘Dark Herring’ Billing Malware Swims onto 105M Android Devices The mobile malware heisted hundreds of millions of dollars from unsuspecting users, thanks to 470 different well-crafted malicious app in Google Play.
26 January 2022

New Year, New Threats: 4 Tips to Activate Your Best Cyber-Defense

New Year, New Threats: 4 Tips to Activate Your Best Cyber-Defense Need a blueprint for architecting a formidable cyber-defense? Kerry Kerry Matre, senior director at Mandiant, shares hers in this detailed breakdown.
26 January 2022

Cybercriminals Love Supply-Chain Chaos: Here’s How to Protect Your Inbox

Cybercriminals Love Supply-Chain Chaos: Here’s How to Protect Your Inbox Threat actors use bogus 'shipping delays' to deceive customers and businesses. Troy Gill, senior manager of threat intelligence at Zix, discusses how spoofing is evolving and what to do.
26 January 2022

Linux Bug in All Major Distros: ‘An Attacker’s Dream Come True’

Linux Bug in All Major Distros: ‘An Attacker’s Dream Come True’ The 12-year-old flaw in the sudo-like polkit’s pkexec tool, found in all major Linux distributions, is likely to be exploited in the wild within days.
26 January 2022