Cybersecurity News


Microsoft Defender Zero-Day Fixed in First Patch Tuesday of 2021

Microsoft patched 83 bugs, including a Microsoft Defender zero-day and one publicly known elevation of privilege flaw.
12 January 2021

SolarWinds: What Hit Us Could Hit Others

New research into the malware that set the stage for the megabreach at IT vendor SolarWinds shows the perpetrators spent months inside the company's software development labs honing their attack before inserting malicious code into updates that SolarWinds then shipped to thousands of customers. More worrisome, the research suggests the insidious methods used by the intruders to subvert the company's software development pipeline could be repurposed against many other major software providers.
12 January 2021

Google reveals sophisticated Windows & Android hacking operation

The attackers used a combination of Android, Chrome, and Windows vulnerabilities, including both zero-days and n-days exploits.
12 January 2021

How to Boost Executive Buy-In for Security Investments

Linking security budgets to breach-protection outcomes helps executives balance spending against risk and earns CISOs greater respect in the C-suite.
12 January 2021

Data Breach at ‘Resident Evil’ Gaming Company Widens

Data Breach at ‘Resident Evil’ Gaming Company Widens Capcom, the game developer behind Resident Evil, Street Fighter and Dark Stalkers, now says its recent attack compromised the personal data of up to 400,000 gamers.
12 January 2021

Mimecast Certificate Hacked in Microsoft Email Supply-Chain Attack

Mimecast Certificate Hacked in Microsoft Email Supply-Chain Attack A sophisticated threat actor has hijacked email security connections to spy on targets.
12 January 2021

BumbleBee Opens Exchange Servers in xHunt Spy Campaign

BumbleBee Opens Exchange Servers in xHunt Spy Campaign The BumbleBee web shell allows APT attackers to upload and download files, and move laterally by running commands.
12 January 2021

Microsoft fixes Defender zero-day in January 2021 Patch Tuesday

Microsoft fixes 83 security bugs in the January 2021 Patch Tuesday releases.
12 January 2021

Adobe Fixes 7 Critical Flaws, Blocks Flash Player Content

Adobe Fixes 7 Critical Flaws, Blocks Flash Player Content Adobe issued patches for seven critical arbitrary-code-execution flaws plaguing Windows and MacOS users.
12 January 2021

Europol Reveals Dismantling of ‘Largest’ Underground Marketplace

Europol Reveals Dismantling of ‘Largest’ Underground Marketplace Europol announced a wide-ranging investigation that led to the arrest of the alleged DarkMarket operator and the seizure of the marketplace's infrastructure, including more than 20 servers.
12 January 2021

Security Operations Struggle to Defend Value, Keep Workers

Companies continue to value security operations centers but the economics are increasingly challenging, with high analyst turnover and questions raised over return on investment.
12 January 2021

Bringing Zero Trust to Secure Remote Access

Bringing Zero Trust to Secure Remote Access Demand for secure remote access has skyrocketed during the pandemic. Here Omdia profiles more secure alternatives to virtual private network (VPN) technology.
12 January 2021

Mimecast says hackers abused one of its certificates to access Microsoft accounts

Mimecast, a provider of email management software, said learned of the security incident from Microsoft.
12 January 2021

Ethical Hackers Breach U.N., Access 100,000 Private Records

Ethical Hackers Breach U.N., Access 100,000 Private Records Researchers informed organization of a flaw that exposed GitHub credentials through the organization’s vulnerability disclosure program.
12 January 2021

Over-Sharer or Troublemaker? How to Identify Insider-Risk Personas

It's past time to begin charting insider risk indicators that identify risky behavior and stop it in its tracks.
12 January 2021

macOS malware used run-only AppleScripts to avoid detection for five years

The macOS.OSAMiner has been active since 2015, primarily infecting users in Asia.
12 January 2021

Post-Backlash, WhatsApp Spells Out Privacy Policy Updates

Post-Backlash, WhatsApp Spells Out Privacy Policy Updates WhatsApp aimed to clear the air about its updated privacy policy after reports of mandatory data sharing with Facebook drove users to Signal and Telegram in troves.
12 January 2021

Operation Spalax: Targeted malware attacks in Colombia

ESET researchers uncover attacks targeting Colombian government institutions and private companies, especially from the energy and metallurgical industries

The post Operation Spalax: Targeted malware attacks in Colombia appeared first on WeLiveSecurity

12 January 2021

Colombian energy, metal firms under fire in new Trojan attack wave

Threat actors have selected three different Trojans to conduct cyberespionage.
12 January 2021

Facebook targets “stop the steal” content ahead of Inauguration Day

Facebook is ramping up content moderation efforts with “new urgency.”
12 January 2021