Cybersecurity News
Containers for Data Analysis Are Rife With Vulnerabilities
Old software components and the inclusion of unnecessary code created a massive attack surface area in containers for scientific analysis, researchers say.04 November 2020
VMware Issues Updated Fix For Critical ESXi Flaw
A previous fix for the critical remote code execution bug was "incomplete," according to VMware.
04 November 2020
CSA Moves to Redefine Cloud-Based Intelligence
The new paradigm seeks to understand, integrate, and automate data workflows, and better yet, doesn't require significant investment or more personnel.04 November 2020
Code42 Incydr Series: Why Most Companies Can’t Stop Departing Employee Data Theft
According to Code42’s Data Exposure Report, 63% of employees say they brought data with them from their previous employer to their current employer.
04 November 2020
Police to Livestream Ring Camera Footage of Mississippi Residents
Pilot program again sparks privacy fears from ACLU as Amazon takes its partnership with law enforcement to the next level.
04 November 2020
As Maze retires, clients turn to Sekhmet ransomware spin-off Egregor
The ransomware’s ‘retirement’ has left a hole that Egregor operators may capitalize on.04 November 2020
Police launch pilot program to tap resident Ring camera live streams
The small trial could herald a wider rollout with participating residents in the future.04 November 2020
23,600 hacked databases have leaked from a defunct 'data breach index' site
Site archive of Cit0day.in has now leaked on two hacking forums after the service shut down in September.04 November 2020
Toy maker Mattel discloses ransomware attack
Mattel said the ransomware attack had "no material impact to [its] operations or financial condition."03 November 2020
REvil ransomware gang 'acquires' KPOT malware
Ransomware gang who claims to have earned $100 million buys the source code of the KPOT information stealer trojan for $6,500.03 November 2020
Securing the 2020 Election: 'We're Not Out of the Woods Yet'
Election Day brought instances of misinformation, robocalls, and technical glitches, but officials are more worried about coming days and weeks.03 November 2020
APT Groups Get Innovative -- and More Dangerous -- in Q3
In "curious" trend, more threat actors diversified their tool sets in third quarter than usual.03 November 2020
US voters targeted with robocalls telling them to stay home or vote tomorrow
Robocalls have been reported in Florida, Georgia, Iowa, Kansas, Michigan, Nebraska, New York, New Hampshire, and North Carolina.03 November 2020
Oracle Solaris Zero-Day Attack Revealed
A threat actor is compromising telecommunications companies and targeted financial and professional consulting industries using an Oracle flaw.
03 November 2020
Neustar Agrees to Buy Verisign's Public DNS Service
The address space for Verisign Public DNS will be incorporated into Neustar's UltraDNS Public service following the acquisition.03 November 2020
APT Groups Finding Success with Mix of Old and New Tools
The APT threat landscape is a mixed bag of tried-and-true tactics and cutting-edge techniques, largely supercharged by geo-politics, a report finds.
03 November 2020
34M Records from 17 Companies Up for Sale in Cybercrime Forum
A diverse set of companies, including an adaptive-learning platform in Brazil, an online grocery service in Singapore and a cold-brew coffee-maker company, are caught up in the large data trove.
03 November 2020
Cybercrime: Nation-States Go Prime Time
Critical infrastructure remains a high-value target, but 90% of nation-states also attack other industry sectors.03 November 2020
Oracle Issues Out-of-Band Update for Remote-Access Vulnerability
The exploit could give an attacker complete control of vulnerable WebLogic servers.03 November 2020
Two Charged in SIM Swapping, Vishing Scams
Two young men from the eastern United States have been hit with identity theft and conspiracy charges for allegedly stealing bitcoin and social media accounts by tricking employees at wireless phone companies into giving away credentials needed to remotely access and modify customer account information.03 November 2020