Cybersecurity News


Adobe Patches 11 Critical Bugs in Popular Acrobat PDF Reader

Adobe Patches 11 Critical Bugs in Popular Acrobat PDF Reader Adobe July patch roundup includes fixes for its ubiquitous and free PDF reader Acrobat 2020 and other software such as Illustrator and Bridge.
13 July 2021

DoD-Validated Data Security Startup Emerges From Stealth

The Code-X platform has been tested by the US Department of Defense and members of the intelligence community.
13 July 2021

Microsoft July 2021 Patch Tuesday: 117 vulnerabilities, Pwn2Own Exchange Server bug fixed

Over 100 CVEs, many of which lead to RCE, have been tackled this month.
13 July 2021

Why We Need to Raise the Red Flag Against FragAttacks

Proliferation of wireless devices increases the risk that corporate networks will be attacked with this newly discovered breed of Wi-Fi-based cyber assault.
13 July 2021

‘Charming Kitten’ APT Siphons Intel From Mid-East Scholars

‘Charming Kitten’ APT Siphons Intel From Mid-East Scholars Professors, journalists and think-tank personnel, beware strangers bearing webinars: It’s the focus of a particularly sophisticated, and chatty, phishing campaign.
13 July 2021

Enterprises Altering Their Supply Chain Defenses on Heels of Latest Breaches

Enterprises Altering Their Supply Chain Defenses on Heels of Latest Breaches More than half of enterprises surveyed for Dark Reading's State of Malware Threats report indicate they are making at least a few changes to their supply chain security defenses following recent attacks on software vendors such as SolarWinds.
13 July 2021

Choosing your MSP: What the Kaseya incident tells us about third‑party cyber risk

Lessons to learn from the Kaseya cyberincident to protect your business' data when doing business with a MSP.

The post Choosing your MSP: What the Kaseya incident tells us about third‑party cyber risk appeared first on WeLiveSecurity

13 July 2021

Can Government Effectively Help Businesses Fight Cybercrime?

From the Biden administration's pledge to take action to INTERPOL's focus on ransomware as a global threat, governments are looking to help businesses cope with cyberattacks. But can it really work?
13 July 2021

Is Remote Desktop Protocol Secure? It Can Be

Is Remote Desktop Protocol Secure? It Can Be Matt Dunn, associate managing director in Kroll's Cyber Risk practice, discusses options for securing RDP, which differ significantly in terms of effectiveness.
13 July 2021

New CISA Director Confirmed, White House Gains Cyber-Director

New CISA Director Confirmed, White House Gains Cyber-Director Jen Easterly, former NSA official and Morgan Stanley vet, will take up the lead at CISA as the ransomware scourge rages on.
13 July 2021

The Trouble With Automated Cybersecurity Defenses

While there's enormous promise in AI-powered tools and machine learning, they are very much a double-edged sword.
13 July 2021

SolarWinds Issues Hotfix for Zero-Day Flaw Under Active Attack

SolarWinds Issues Hotfix for Zero-Day Flaw Under Active Attack Microsoft alerted the company to a security vulnerability in its Serv-U Managed File Transfer and Secure FTP products that a cyberattacker is using to target a “limited” amount of customers.
13 July 2021

Tool Sprawl & False Positives Hold Security Teams Back

Security teams spend as much time addressing false positive alerts as they do addressing actual cyberattacks, survey data shows.
13 July 2021

Modipwn: code execution vulnerability discovered in Schneider Electric Modicon PLCs

The security flaw allows attackers to obtain full control over a PLC.
13 July 2021

Google's Certificate Authority Service leaves preview, now generally available

Google CAS was launched to handle the "growth in certificates in the digital world."
13 July 2021

The hybrid workplace: What does it mean for cybersecurity?

How can organizations mitigate the risk of damaging cyberattacks while juggling the constantly changing mix of office and off-site workers?

The post The hybrid workplace: What does it mean for cybersecurity? appeared first on WeLiveSecurity

13 July 2021

SolarWinds Discloses Zero-Day Under Active Attack

The company confirms this is a new vulnerability that is not related to the supply chain attack discovered in December 2020.
12 July 2021

BIOPASS RAT Uses Live Streaming Steal Victims’ Data

BIOPASS RAT Uses Live Streaming Steal Victims’ Data The malware has targeted Chinese gambling sites with fake app installers.
12 July 2021

WordPress File Management Plugin Riddled with Critical Bugs

WordPress File Management Plugin Riddled with Critical Bugs The bugs allow a range of attacks on websites, including deleting blog pages and remote code execution.
12 July 2021

Microsoft Confirms Acquisition of RiskIQ

RiskIQ's technology helps businesses assess their security across the Microsoft cloud, Amazon Web Services, other clouds, and on-premises.
12 July 2021