Cybersecurity News
Kegtap, Singlemalt, Winekey Malware Serve Up Ransomware to Hospitals
Amid an uptick in attacks on healthcare orgs, malware families, Kegtap, Singlemalt and Winekey are being used to deliver the Ryuk ransomware to already strained systems.
29 October 2020
University Email Hijacking Attacks Push Phishing, Malware
Attackers are compromising email accounts from popular universities, including Purdue and Oxford, to launch attacks that get around DMARC and SPF.
29 October 2020
REvil Gang Promises a Big Video-Game Hit; Claims Massive Revenue
In a wide-ranging interview, a REvil leader said the gang is earning $100 million per year, and provided insights into the life of a cybercriminal.
29 October 2020
Hackers Make Off With Millions From Wisconsin Republicans
According to the Wisconsin Republican Party, thieves used altered invoices to make off with $2.3 million in election funds.29 October 2020
Ransomware Wave Targets US Hospitals: What We Know So Far
A joint advisory from the CSIA, FBI, and HHS warns of an "increased and imminent" threat to US hospitals and healthcare providers.29 October 2020
How Healthcare Organizations Can Combat Ransomware
The days of healthcare organizations relying solely on endpoint security software to stop attacks are over. Here are six ways that healthcare providers can fight the ever-present threat.29 October 2020
Why Defense, Not Offense, Will Determine Global Cyber Powers
Darktrace director of strategic threat Marcus Fowlers explains what to expect from nation-state attackers in the months to come -- and why kindergarten classes are a good model for solid cybersecurity.
29 October 2020
Over 100,000 machines remain vulnerable to SMBGhost exploitation
The patch for the critical flaw that allows malware to spread across machines without any user interaction was released months ago
The post Over 100,000 machines remain vulnerable to SMBGhost exploitation appeared first on WeLiveSecurity
29 October 2020
Cybercriminals Aim BEC Attacks at Education Industry
Heightened vulnerability comes at a time when the sector has been focusing on setting up a remote workforce and online learning amid the pandemic.
29 October 2020
Analysis: Forcepoint Can Still Succeed, but It Needs Committed Ownership
Raytheon intends to sell Forcepoint to PE firm Francisco Partners. Despite a solid product portfolio and bold strategy, Forcepoint's future is now even more uncertain.29 October 2020
Home Depot Confirms Data Breach in Order Confirmation SNAFU
Hundreds of emailed order confirmations for random strangers were sent to Canadian customers, each containing personal information.
29 October 2020
Oracle WebLogic Server RCE Flaw Under Active Attack
The flaw in the console component of the WebLogic Server, CVE-2020-14882, is under active attack, researchers warn.
29 October 2020
'Act of War' Clause Could Nix Cyber Insurance Payouts
The indictment of six members of the Russian military for the NotPetya ransomware attack places companies on notice that insurance "is not a get-out-of-jail-free card."29 October 2020
Is Your Encryption Ready for Quantum Threats?
Answers to these five questions will help security teams defend against attackers in the post-quantum computing era.29 October 2020
Bug-Bounty Awards Spike 26% in 2020
The most-rewarded flaw is XSS, which is among those that are relatively cheap for organizations to identify.
29 October 2020
McAfee debuts remote browser isolation solution, XDR platform
The company’s new offerings are designed with real-time protection and incident management in mind.29 October 2020
IoT security: Are we finally turning the corner?
Better IoT security and data protection are long overdue. Will they go from an afterthought to everyone's priority any time soon?
The post IoT security: Are we finally turning the corner? appeared first on WeLiveSecurity
29 October 2020
Xfinity, McAfee Brands Abused by Parked Domains in Active Campaigns
Malicious redirection websites are using typosquatting and impersonation to attack unwary visitors.
29 October 2020
FBI, DHS, HHS Warn of Imminent, Credible Ransomware Threat Against U.S. Hospitals
On Monday, Oct. 27, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the United States. Today, officials from the FBI and the U.S. Department of Homeland Security hastily assembled a conference call with healthcare industry executives warning about an "imminent cybercrime threat to U.S. hospitals and healthcare providers."28 October 2020
Breaking the Glass Ceiling: Tough for Women, Tougher for Women of Color
Security practitioners shed light on obstacles limiting career growth and the steps businesses can take to achieve their promises of a more diverse workforce.28 October 2020