Cybersecurity News
FinSpy surveillance malware is now spreading through UEFI bootkits
The spyware had previously been associated with malicious installers and MBR bootkits.Working Exploit Is Out for VMware vCenter CVE-2021-22005 Flaw
![Working Exploit Is Out for VMware vCenter CVE-2021-22005 Flaw Working Exploit Is Out for VMware vCenter CVE-2021-22005 Flaw](https://media.threatpost.com/wp-content/uploads/sites/103/2016/11/06232507/vmware-patch-150x150.jpg)
SolarWinds Attackers Hit Active Directory Servers with FoggyWeb Backdoor
![SolarWinds Attackers Hit Active Directory Servers with FoggyWeb Backdoor SolarWinds Attackers Hit Active Directory Servers with FoggyWeb Backdoor](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/28102455/foggyweb-e1632839155760-150x150.jpg)
Credential Spear-Phishing Uses Spoofed Zix Encrypted Email
![Credential Spear-Phishing Uses Spoofed Zix Encrypted Email Credential Spear-Phishing Uses Spoofed Zix Encrypted Email](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/27182114/encrypted-email-150x150.png)
Scalper bots are now targeting graphics card vendors
Concert tickets are no longer the most coveted items on a reseller's list.5 Steps to Securing Your Network Perimeter
![5 Steps to Securing Your Network Perimeter 5 Steps to Securing Your Network Perimeter](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/27162144/moat-150x150.png)
Women, Minorities Are Hacked More Than Others
![Women, Minorities Are Hacked More Than Others Women, Minorities Are Hacked More Than Others](https://media.threatpost.com/wp-content/uploads/sites/103/2021/02/25134709/cybercrime-partnerships-150x150.jpg)
EU: Russia Behind ‘Ghostwriter’ Campaign Targeting Germany
![EU: Russia Behind ‘Ghostwriter’ Campaign Targeting Germany EU: Russia Behind ‘Ghostwriter’ Campaign Targeting Germany](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/27111627/Bundestag-150x150.jpeg)
Google releases emergency fix to plug zero‑day hole in Chrome
The emergency release comes a mere three days after Google’s previous update that plugged another 19 security loopholes
The post Google releases emergency fix to plug zero‑day hole in Chrome appeared first on WeLiveSecurity
3.8 Billion Users’ Combined Clubhouse, Facebook Data Up for Sale
![3.8 Billion Users’ Combined Clubhouse, Facebook Data Up for Sale 3.8 Billion Users’ Combined Clubhouse, Facebook Data Up for Sale](https://media.threatpost.com/wp-content/uploads/sites/103/2021/04/12161627/Clubhouse2-150x150.png)
Exchange/Outlook Autodiscover Bug Spills $100K+ Email Passwords
![Exchange/Outlook Autodiscover Bug Spills $100K+ Email Passwords Exchange/Outlook Autodiscover Bug Spills $100K+ Email Passwords](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/10165815/infosec_insiders_in_article_promo.png)
New Guidelines on Remote Assessments
Today, the Council has published “PCI SSC Remote Assessment Guidelines and Procedures”. These Guidelines define the principles and procedures for the appropriate use of remote assessments for PCI SSC standards when an onsite assessment is not possible. Here we interview Emma Sutcliffe, SVP Standards Officer on how the industry can use these guidelines to support secure remote assessment practices.
TangleBot Malware Reaches Deep into Android Device Functions
![TangleBot Malware Reaches Deep into Android Device Functions TangleBot Malware Reaches Deep into Android Device Functions](https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/09154655/Android-security-bulletin-September-150x150.jpg)
Critical Cisco Bugs Allow Code Execution on Wireless, SD-WAN
![Critical Cisco Bugs Allow Code Execution on Wireless, SD-WAN Critical Cisco Bugs Allow Code Execution on Wireless, SD-WAN](https://media.threatpost.com/wp-content/uploads/sites/103/2020/11/11092729/cisco-150x150.jpg)
Week in security with Tony Anscombe
ESET unmasks FamousSparrow APT group – Stopping cloud data leaks – European cybercrime ring busted
The post Week in security with Tony Anscombe appeared first on WeLiveSecurity
Apple Patches 3 More Zero-Days Under Active Attack
![Apple Patches 3 More Zero-Days Under Active Attack Apple Patches 3 More Zero-Days Under Active Attack](https://media.threatpost.com/wp-content/uploads/sites/103/2020/11/06090222/apple-ios-vulnerability-bug-150x150.jpg)
FBI arrests 75-year-old for allegedly placing pipe bombs outside phone, carrier stores
The suspect was reportedly upset over handsets being used to spread "immoral content."REvil Affiliates Confirm: Leadership Were Cheating Dirtbags
![REvil Affiliates Confirm: Leadership Were Cheating Dirtbags REvil Affiliates Confirm: Leadership Were Cheating Dirtbags](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/23184910/cheating-e1632437402940-150x150.jpeg)
5 Tips for Achieving Better Cybersecurity Risk Management
![5 Tips for Achieving Better Cybersecurity Risk Management 5 Tips for Achieving Better Cybersecurity Risk Management](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/23150516/high-risk-150x150.jpg)
100M IoT Devices Exposed By Zero-Day Bug
![100M IoT Devices Exposed By Zero-Day Bug 100M IoT Devices Exposed By Zero-Day Bug](https://media.threatpost.com/wp-content/uploads/sites/103/2020/10/23154322/iot-150x150.jpg)