Cybersecurity News
Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’
![Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’ Financial Cybercrime: Why Cryptocurrency is the Perfect ‘Getaway Car’](https://media.threatpost.com/wp-content/uploads/sites/103/2021/08/26171204/cryptocurrency_fail-405x270-1-150x150.jpeg)
09 September 2021
‘Azurescape’ Kubernetes Attack Allows Cross-Container Cloud Compromise
![‘Azurescape’ Kubernetes Attack Allows Cross-Container Cloud Compromise ‘Azurescape’ Kubernetes Attack Allows Cross-Container Cloud Compromise](https://media.threatpost.com/wp-content/uploads/sites/103/2018/11/01110334/Azure-Microsoft-cloud-150x150.png)
09 September 2021
SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’
![SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’ SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/09100748/House-Fly-4-150x150.jpeg)
09 September 2021
Zoho Password Manager Zero-Day Bug Under Active Attack Gets a Fix
![Zoho Password Manager Zero-Day Bug Under Active Attack Gets a Fix Zoho Password Manager Zero-Day Bug Under Active Attack Gets a Fix](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/09085735/keys-150x150.jpg)
09 September 2021
BladeHawk Attackers Target Kurds with Android Apps
![BladeHawk Attackers Target Kurds with Android Apps BladeHawk Attackers Target Kurds with Android Apps](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/09072544/kurds-150x150.jpg)
09 September 2021
Attacker releases credentials for 87,000 FortiGate SSL VPN devices
Access data for FortiGate devices was obtained by exploiting a known, old vulnerability.09 September 2021
91% of IT teams have felt 'forced' to trade security for business operations
When it comes to remote work, security is often the last thing on the priority list.09 September 2021
GitHub tackles severe vulnerabilities in Node.js packages
Bugs impacting tar and @npmcli/arborist were reported through a bug bounty program.09 September 2021
What Ragnar Locker Got Wrong About Ransomware Negotiators – Podcast
![What Ragnar Locker Got Wrong About Ransomware Negotiators – Podcast What Ragnar Locker Got Wrong About Ransomware Negotiators – Podcast](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/08161420/bribe-150x150.jpeg)
08 September 2021
Tooling Network Detection & Response for Ransomware
![Tooling Network Detection & Response for Ransomware Tooling Network Detection & Response for Ransomware](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/08142255/gate-150x150.jpg)
08 September 2021
Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports
![Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports Spoofing Bug Highlights Cybersecurity for Digital Vaccine Passports](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/08131614/vax-passport-150x150.jpg)
08 September 2021
TeamTNT’s New Tools Target Multiple OS
![TeamTNT’s New Tools Target Multiple OS TeamTNT’s New Tools Target Multiple OS](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/08095039/chimera-150x150.jpg)
08 September 2021
Microsoft: Attackers Exploiting Windows Zero-Day Flaw
Microsoft Corp. warned Tuesday that attackers are exploiting a previously unknown vulnerability in Windows 10 and many Windows Server versions to seize control over PCs when users open a malicious document or visit a booby-trapped website. There is currently no official patch for the flaw, but Microsoft has released recommendations for mitigating the threat.08 September 2021
Pro-Chinese government propaganda campaign spurs on COVID-19 protests in the US
The campaign is far more extensive than previously thought.08 September 2021
Microsoft, CISA Urge Mitigations for Zero-Day RCE Flaw in Windows
![Microsoft, CISA Urge Mitigations for Zero-Day RCE Flaw in Windows Microsoft, CISA Urge Mitigations for Zero-Day RCE Flaw in Windows](https://media.threatpost.com/wp-content/uploads/sites/103/2020/09/15073634/Microsoft-Office-150x150.jpg)
08 September 2021
Operation Chimaera: TeamTNT hacking group strikes thousands of victims worldwide
The cybercriminals are now indiscriminate in the operating systems they attack.08 September 2021
BladeHawk attackers spy on Kurds with fake Android apps
Facebook is being abused to spread surveillanceware focused on the Kurdish ethnic group.08 September 2021
Ragnar Locker Gang Warns Victims Not to Call the FBI
![Ragnar Locker Gang Warns Victims Not to Call the FBI Ragnar Locker Gang Warns Victims Not to Call the FBI](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/07173733/shush-150x150.jpeg)
07 September 2021
Netgear Smart Switches Open to Complete Takeover
![Netgear Smart Switches Open to Complete Takeover Netgear Smart Switches Open to Complete Takeover](https://media.threatpost.com/wp-content/uploads/sites/103/2021/09/07162353/Flames-Devil-Horror-Horns-Demon-5863702-150x150.jpg)
07 September 2021
Back-to-Basics: Choose Trusted Partners
As small and medium businesses begin to re-open following the pandemic, it’s important to do so securely in order to protect customer’s payment card data. Too often, data breaches happen as a result of vulnerabilities that are entirely preventable. The PCI Security Standards Council (PCI SSC) has developed a set of payment protection resources for small businesses. In this 8-part back-to-basics series, we highlight payment security basics for protecting against payment data theft. Today’s blog focuses on choosing trusted partners.
07 September 2021