Cybersecurity News


New CDRThief malware targets VoIP softswitches to steal call detail records

Malware targets only two very specific softswitches (software switches): Linknat VOS2009 and VOS3000.
10 September 2020

Privacy concerns prompt Irish regulators to ask Facebook to stop sending EU user data to the US

A preliminary order brings to light concerns over US surveillance activities.
10 September 2020

Who is calling? CDRThief targets Linux VoIP softswitches

ESET researchers have discovered and analyzed malware that targets Voice over IP (VoIP) softswitches.

The post Who is calling? CDRThief targets Linux VoIP softswitches appeared first on WeLiveSecurity

10 September 2020

CDRThief Malware Targets VoIP Gear in Carrier Networks

CDRThief Malware Targets VoIP Gear in Carrier Networks The Linux-targeted code can steal phone-call metadata, likely in spy campaigns or for use in VoIP fraud.
10 September 2020

Data center giant Equinix discloses ransomware incident

Equinix says ransomware hit internal systems but that data centers are OK.
10 September 2020

ProLock ransomware - everything you need to know

New strain joins the big players on the ransomware scene.
10 September 2020

Slovak cryptocurrency exchange ETERBASE discloses $5.4 million hack

Bitcoin, Ether, ALGO, Ripple, Tezos, and TRON assets were stolen in the hack.
09 September 2020

Raccoon attack allows hackers to break TLS encryption 'under certain conditions'

The Raccoon attack is described as "really hard to exploit" and its conditions as "rare."
09 September 2020

Ransomware Attacks Disrupt School Reopenings

A flurry of recent attacks is complicating attempts to deliver classes online at some schools in different parts of the country.
09 September 2020

Legality of Security Research to be Decided in US Supreme Court Case

A ruling that a police officer's personal use of a law enforcement database is "hacking" has security researchers worried for the future.
09 September 2020

UK University suffers cyberattack, ransomware gang claims responsibility 

The cyber incident has taken most of Newcastle University’s systems offline and officials estimates it will take weeks to recover. 

The post UK University suffers cyberattack, ransomware gang claims responsibility  appeared first on WeLiveSecurity

09 September 2020

Meet the Middlemen Who Connect Cybercriminals With Victims

An analysis of initial access brokers explains how they break into vulnerable organizations and sell their access for up to $10,000.
09 September 2020

Chart: Does Lack of Diversity Impact the Skills Shortage?

Chart: Does Lack of Diversity Impact the Skills Shortage? Yes, according to 21% of security pros who participated in the 2020 Black Hat Attendee Survey.
09 September 2020

Inova Suffers Third-Party Data Breach

The breach occurred as part of a ransomware attack against service provider Blackbaud.
09 September 2020

Zeppelin Ransomware Returns with New Trojan on Board

Zeppelin Ransomware Returns with New Trojan on Board The malware has popped up in a targeted campaign and a new infection routine.
09 September 2020

Google Squashes Critical Android Media Framework Bug

Google Squashes Critical Android Media Framework Bug The September Android security bulletin addressed critical- and high-severity flaws tied to 53 CVEs overall.
09 September 2020

Our Diversity Program Isn't Working. What Are We Doing Wrong?

Our Diversity Program Isn't Working. What Are We Doing Wrong? Assuming that you're truly stuck, here are some things to consider.
09 September 2020

Why We Need to Pay Attention to Attacks on the Smart-Built Environment

Are attacks on IoT physical security devices real or just theoretical? Why professionals need to be aware of the real-life examples in an effort to guard against future attacks on their own businesses.
09 September 2020

BLURtooth vulnerability lets attackers overwrite Bluetooth authentication keys

All devices using the Bluetooth standard 4.0 through 5.0 are vulnerable. Patches not immediately available.
09 September 2020

Secureworks to Buy Delve Laboratories for Vulnerability Management

Delve's automated vulnerability platform provides insight on high-risk vulnerabilities across an organization's network, endpoints, and cloud.
09 September 2020