Cybersecurity News
Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader
A patch for Adobe Acrobat, the world’s leading PDF reader, fixes a vulnerability under active attack affecting both Windows and macOS systems that could lead to arbitrary code execution.
E-commerce Payment Security: A Perspective from Brazil
It has been more than a year since the outbreak of the COVID-19 global pandemic which has had a significant impact on health, lifestyles, and the way business is done. In the world of payments, many businesses have had to reinvent themselves and adapt to remote transactions and the world of e-commerce (in many cases on the cloud). On this blog, we discuss the challenges of e-commerce on payment security in Brazil with Carlos Caetano, Associate Regional Director, Brazil for the PCI Security Standards Council (PCI SSC) and Gerson Rolim, Antifraud and Internet Payments Steering Committees Coordinator, Camara-e.net. Camara-e.net is a member of the PCI Brazil Regional Engagement Board (REB), a board that represents the perspectives of PCI Participating Organizations and PCI constituents in Brazil, advising and providing feedback and guidance to the PCI SSC on standards and programs development and adoption in Brazil.
Fake Chrome App Anchors Rapidly Worming ‘Smish’ Cyberattack
An ingenious attack on Android devices self-propagates, with the potential for a range of damage.
3 Cybersecurity Myths to Bust
Deeply rooted cybersecurity misconceptions are poisoning our ability to understand and defend against attacks.A Closer Look at the DarkSide Ransomware Gang
The FBI confirmed this week that a relatively new ransomware group known as DarkSide is responsible for an attack that caused Colonial Pipeline to shut down 5,550 miles of pipe, stranding countless barrels of gasoline, diesel and jet fuel on the Gulf Coast. Here's a closer look at the DarkSide cybercrime gang, as seen through their negotiations with a recent U.S. victim that earns $15 billion in annual revenue.Shifting Threats in a Changed World: Edge, IoT and Vaccine Fraud
Aamir Lakhani, researcher at FortiGuard Labs, discusses leading-edge threats related to edge access/browsers/IoT, and the COVID-19 vaccine, as a way of getting into larger organizations.
200K Veterans’ Medical Records Likely Stolen by Ransomware Gang
Analyst finds ransomware evidence, despite a contractor's denial of compromise.
DarkSide Wanted Money, Not Disruption from Colonial Pipeline Attack
Statement by the ransomware gang suggests that the incident that crippled a major U.S. oil pipeline may not have exactly gone to plan for overseas threat actors.
Critical Infrastructure Under Attack
Several recent cyber incidents targeting critical infrastructure prove that no open society is immune to attacks by cybercriminals. The recent shutdown of key US energy pipeline marks just the tip of the iceberg.WhatsApp will limit features for users who don’t accept new data‑sharing rules
Your account won’t be deleted, but here's what you may want to be aware of if not even repeated reminders do the trick
The post WhatsApp will limit features for users who don’t accept new data‑sharing rules appeared first on WeLiveSecurity
Colonial Pipeline ransomware attack: Everything you need to know
Updated: DarkSide has claimed responsibility for the catastrophic ransomware outbreak.Everything you need to know about the Colonial Pipeline ransomware attack
DarkSide has claimed responsibility for the catastrophic ransomware outbreak.GitHub shifts away from passwords with security key support for SSH Git operations
Support has been added to bolster defense against account compromise.Virtual Private Networks
Virtual Private Networks (VPN) create encrypted tunnels when you connect to the Internet. They are a fantastic way to protect your privacy and data, especially when traveling and connecting to untrusted or unknown networks, such as at hotels or coffee shops. Use a VPN whenever possible, both for work and personal use.Colonial Pipeline Cyberattack: What Security Pros Need to Know
As the massive US pipeline operator works to restore operations after a DarkSide ransomware attack late last week, experts say it's a cautionary tale for critical infrastructure providers.Tulsa Deals with Aftermath of Ransomware Attack
Weekend attack shuts down several city sites and service.Four Plead Guilty to RICO Conspiracy Involving Hosting Services for Cybercrime
The "bulletproof hosting" organization hosted malware including Zeus, SpyEye, Citadel, and the Blackhole Exploit Kit.DarkSide explained: the ransomware group responsible for Colonial Pipeline cyberattack
The group's existence is tied to a murky web of shorted stocks, criminality, and failed attempts to appear as Robin Hood.Colonial Pipeline’s Ransomware Attack Sparks Emergency Declaration
Security researchers mull possible perpetrators of the attack, and warned that the incident could be a harbinger of things to come.
Lemon Duck Cryptojacking Botnet Changes Up Tactics
The sophisticated threat is targeting Microsoft Exchange servers via ProxyLogon in a wave of fresh attacks against North American targets.