Cybersecurity News


Apps Built Better: Why DevSecOps is Your Security Team’s Silver Bullet

Apps Built Better: Why DevSecOps is Your Security Team’s Silver Bullet Phil Richards, vice president and CSO at Ivanti, explains how organizations can design DevOps processes and systems to thwart cyberattacks.
14 July 2021

Trickbot Malware Rebounds with Virtual-Desktop Espionage Module

Trickbot Malware Rebounds with Virtual-Desktop Espionage Module The attackers have spruced up the 'vncDll' module used for spying on targets and stealing data.
14 July 2021

10 Mistakes Companies Make In Their Ransomware Responses

10 Mistakes Companies Make In Their Ransomware Responses Hit by ransomware? These missteps can take a bad scenario and make it even worse.
14 July 2021

Microsoft Patch Tuesday fixes 13 critical flaws, including 4 under active attack

The latest Patch Tuesday brings a new batch of security updates addressing a total of 117 vulnerabilities

The post Microsoft Patch Tuesday fixes 13 critical flaws, including 4 under active attack appeared first on WeLiveSecurity

14 July 2021

4 Integrated Circuit Security Threats and How to Protect Against Them

Little-understood threats involving the IC supply chain are putting organizations around the world at risk.
14 July 2021

Updated Joker Malware Floods into Android Apps

Updated Joker Malware Floods into Android Apps The Joker premium billing-fraud malware is back on Google Play in a fresh onslaught, with an updated bag of tricks to evade scanners.
14 July 2021

Does cybercrime impact cryptocurrency prices? Researchers find out

Memestocks can ramp up with hype: can crypto do the same due to criminality?
14 July 2021

Windows Hello Bypass Fools Biometrics Safeguards in PCs

Windows Hello Bypass Fools Biometrics Safeguards in PCs A Windows security bug would allow an attacker to fool a USB camera used in the biometric facial-recognition aspect of the system.
14 July 2021

US charges Greek national for selling insider trading subscriptions in the Dark Web

"TheBull" offered customers insider information, tips, and pre-release earnings.
14 July 2021

Thousands of PS4s seized in Ukraine in illegal cryptocurrency mining sting

The cryptocurrency farm was hidden in an old warehouse.
14 July 2021

New Phishing Campaign Targets Individuals of Interest to Iran

TA453 group spoofed two scholars at University of London to try and gain access to email inboxes belonging to journalists, think tank personnel, academics, and others, security vendor says.
13 July 2021

Microsoft Patch Tuesday, July 2021 Edition

Microsoft today released updates to patch at least 116 security holes in its Windows operating systems and related software. A half of dozen of the vulnerabilities addressed today are under active attack, according to Microsoft.
13 July 2021

Microsoft Crushes 116 Bugs, Three Actively Exploited

Microsoft Crushes 116 Bugs, Three Actively Exploited Microsoft tackles 12 critical bugs, part of its July 2021 Patch Tuesday roundup, capping a ‘PrintNightmare’ month of headaches for system admins.
13 July 2021

Microsoft Patches 3 Windows Zero-Days Amid 117 CVEs

The July Patch Tuesday release also includes the out-of-band fix for the Windows Print Spooler remote code execution flaw under attack.
13 July 2021

Ransomware Giant REvil’s Sites Disappear

Ransomware Giant REvil’s Sites Disappear Just days after President Biden demanded that Russian President Putin shut down ransomware groups, the servers of one of the biggest groups mysteriously went dark.
13 July 2021

Guess Fashion Brand Deals With Data Loss After Ransomware Attack

Guess Fashion Brand Deals With Data Loss After Ransomware Attack An attack on Guess compromised the personal and banking data of 1,300 victims.
13 July 2021

Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers

Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers The 'ModiPwn' bug lays open production lines, sensors, conveyor belts, elevators, HVACs and more that use Schneider Electric PLCs.
13 July 2021

PCI SSC Shares Resources for Navigating Changing Payment Environments

 

Greetings to our PCI SSC stakeholder community!

With 2021 half done, I wanted to take this opportunity to share with you what the PCI Security Standards Council (PCI SSC) is doing to assist the industry as we continue to navigate the changes brought on by the pandemic. The current phase is a hybrid of old and new, and defined by rapid changes including re-openings and continued, or returning, lockdowns.

13 July 2021

Amazon rolls out encryption for Ring doorbells

Privacy advocates have been asking for Amazon to encrypt its popular Ring doorbells audio and video traffic, and Amazon is finally delivering it.
13 July 2021

Adobe Patches 11 Critical Bugs in Popular Acrobat PDF Reader

Adobe Patches 11 Critical Bugs in Popular Acrobat PDF Reader Adobe July patch roundup includes fixes for its ubiquitous and free PDF reader Acrobat 2020 and other software such as Illustrator and Bridge.
13 July 2021