Cybersecurity News
Cloud Identity and Access Management: Understanding the Chain of Access
Here's where enterprises encounter challenges with cloud IAM and the best practices they should follow to correct these mistakes.10 December 2020
Microsoft exposes Adrozek, malware that hijacks Chrome, Edge, and Firefox
Microsoft says that at its peak, Adrozek had controlled more than 30,000 devices a day.10 December 2020
MoleRats APT Returns with Espionage Play Using Facebook, Dropbox
The threat group is increasing its espionage activity in light of the current political climate and recent events in the Middle East, with two new backdoors.
10 December 2020
Payment Processing Giant TSYS: Ransomware Incident “Immaterial” to Company
Payment card processing giant TSYS suffered a ransomware attack earlier this month. Since then reams of data stolen from the company have been posted online, with the attackers promising to publish more in the coming days. But the company says the malware did not jeopardize card data, and that the incident was limited to administrative areas of its business.10 December 2020
51% of Edge Readers Plan to Pursue New Cybersecurity Certification in 2021
Demands of the "new normal" won't stop the majority of poll-takers from mastering new skills.
10 December 2020
Pwnie Awards 2020 winners include Zerologon, CurveBall, Checkm8, BraveStarr attacks
The cybersecurity community voted for the best bugs and vulnerabilities discovered over the past year.10 December 2020
PLEASE_READ_ME Ransomware Attacks 85K MySQL Servers
Ransomware actors behind the attack have breached at least 85,000 MySQL servers, and are currently selling at least compromised 250,000 databases.
10 December 2020
Critical Cisco Jabber Bug Gets Updated Fix
A series of bugs, patched in September, still allow remote code execution by attackers.
10 December 2020
85,000 MySQL Servers Hit in Active Ransomware Campaign
Attackers pressure victims into paying ransom by publishing and offering for sale data stolen in a campaign that dates back to January.10 December 2020
Cyber Monday is Every Monday: Securing the ‘New Normal’
From eCommerce threats, to security concerns in connected speakers, Fortinet researchers discuss the top evolving threats of 2020, heading into the new year.
10 December 2020
The Line Between Physical Security & Cybersecurity Blurs as World Gets More Digital
Security teams are being challenged by the connected nature of IP devices, and preventing them from being compromised by cybercriminals has become an essential part of keeping people and property safe.10 December 2020
Romania to host the EU's new cybersecurity research hub
Romania's capital, Bucharest, was selected as host for the EU's future cybersecurity research hub.10 December 2020
Google Shares Cloud Security Tips
Anton Chuvakin, head of solution strategy at Google Cloud Security, discusses common cloud security hurdles and how to get over them.10 December 2020
Misery of Ransomware Hits Hospitals the Hardest
Ransomware attacks targeting hospitals have exacted a human cost as well as financial.
10 December 2020
Proof-of-concept exploit code published for new Kerberos Bronze Bit attack
The Kerberos Bronze Bit attack can allow intruders to bypass authentication and access sensitive network services.10 December 2020
Critical Steam Flaws Could Let Gamers to Crash Opponents’ Computers
Valve fixed critical bugs in its Steam gaming client, which is a platform for popular video games like Counter Strike: Global Offensive, Dota2 and Half Life.
10 December 2020
Cybersecurity Advent calendar: Tips for buying gifts and not receiving coal
While shopping for the perfect presents, be on the lookout for naughty cybercriminals trying to ruin your Christmas cheer by tricking you out of both gifts and money
The post Cybersecurity Advent calendar: Tips for buying gifts and not receiving coal appeared first on WeLiveSecurity
10 December 2020
Operation StealthyTrident: corporate software under attack
LuckyMouse, TA428, HyperBro, Tmanger and ShadowPad linked in Mongolian supply-chain attack
The post Operation StealthyTrident: corporate software under attack appeared first on WeLiveSecurity
10 December 2020
njRAT Trojan operators are now using Pastebin as alternative to central command server
Avoiding C2 infrastructure could help hackers avoid detection.10 December 2020