Cybersecurity News


Mexican Politician Removed Over Alleged Ties to Romanian ATM Skimmer Gang

The leader of Mexico's Green Party has been removed from office following allegations that he received money from a Romanian ATM skimmer gang that stole hundreds of millions of dollars from tourists visiting Mexico's top tourist destinations over the past five years. The scandal is the latest fallout stemming from a three-part investigation into the organized crime group by KrebsOnSecurity in 2015.
19 February 2021

Week in security with Tony Anscombe

Avoid COVID-19 vaccine fraud and hoaxes – Romance scams cause record-high losses – Exaramel in the spotlight after attacks in France

The post Week in security with Tony Anscombe appeared first on WeLiveSecurity

19 February 2021

Brave browser leaks onion addresses in DNS traffic

DNS leak leaves footprints in DNS server logs for a Brave user's Tor traffic.
19 February 2021

TDoS attacks could cost lives, warns FBI

Both hacktivists and extortionists have used telephony denial-of-service attacks as a way to further their goals

The post TDoS attacks could cost lives, warns FBI appeared first on WeLiveSecurity

19 February 2021

How to Fine-Tune Vendor Risk Management in a Virtual World

Without on-site audits, many organizations lack their usual visibility to assess risk factors and validate contracts and SLA with providers.
19 February 2021

Microsoft: SolarWinds Attackers Downloaded Azure, Exchange Code

Microsoft: SolarWinds Attackers Downloaded Azure, Exchange Code However, internal products and systems were not leveraged to attack others during the massive supply-chain incident, the tech giant said upon completion of its Solorigate investigation.
19 February 2021

Myanmar arrests 11 suspects for hacking government sites during protests

Hacktivists operated via a Facebook group and called themselves the "Myanmar Hackers."
19 February 2021

Malaysia arrests 11 suspects for hacking government sites

A similar government website defacement campaign is also taking place this week in Myanmar, in support of the country's jailed elected leader.
19 February 2021

Microsoft Concludes Internal Investigation into Solorigate Breach

The software giant found no evidence that attackers gained extensive access to services or customer data.
18 February 2021

CrowdStrike Buys Log Management Startup Humio for $400M

CrowdStrike plans to use Humio's technology to continue building out its extended detection and response platform.
18 February 2021

Cybercriminal Enterprise ‘Ringleaders’ Stole $55M Via COVID-19 Fraud, Romance Scams

Cybercriminal Enterprise ‘Ringleaders’ Stole $55M Via COVID-19 Fraud, Romance Scams The Department of Justice (DoJ) cracked down on a Ghana-based cybercriminal enterprise behind a slew of romance scams, COVID-19 fraud attacks and business email compromise schemes since 2013.
18 February 2021

Apple Outlines 2021 Security, Privacy Roadmap

Apple Outlines 2021 Security, Privacy Roadmap Latest Apple Platform Security update folds iOS, macOS and hardware into security 2021 roadmap.
18 February 2021

Apple Offers Closer Look at Its Platform Security Technologies, Features

In a nearly 200-page document, company offers a detailed overview of Secure Enclave and multiple other security controls in Apple silicon-based Macs and other platforms.
18 February 2021

Kia Motors Hit With $20M Ransomware Attack – Report

Kia Motors Hit With $20M Ransomware Attack – Report So far, Kia Motors America has publicly acknowledged an “extended system outage,” but ransomware gang DoppelPaymer claimed it has locked down the company’s files in a cyberattack that includes a $20 million ransom demand. That $20 million will gain Kia a decryptor and a guarantee to not to publish sensitive data bits on the gang’s […]
18 February 2021

Microsoft Azure Front Door Gets a Security Upgrade

New SKUs in Standard and Premium preview beef up the security of the content delivery network platform.
18 February 2021

PCI Secure SLC Program Expands Vendor Eligibility with Version 1.1


Today, the PCI Security Standards Council (PCI SSC) published version 1.1 of the PCI Secure Software Lifecycle (SLC) Standard and its supporting program documentation. The PCI Secure SLC Standard is one of two standards that are part of the PCI Software Security Framework (SSF). It provides security requirements and assessment procedures for software vendors to integrate into their software development lifecycles and to validate that secure lifecycle management practices are in place.

18 February 2021

Hiding in Plain Sight: What the SolarWinds Attack Revealed About Efficacy

Multilayered infiltration involved custom malicious tooling, backdoors, and cloaked code, far beyond the skills of script kiddies.
18 February 2021

Exploit Details Emerge for Unpatched Microsoft Bug

Exploit Details Emerge for Unpatched Microsoft Bug A malicious website or malicious ad can trigger an exploit for the IE zero-day bug, opening the door for data theft and code execution, new analysis notes.
18 February 2021

Microsoft says SolarWinds hackers downloaded some Azure, Exchange, and Intune source code

Microsoft says it has completed its investigation into its SolarWinds-related breach.
18 February 2021

Malware authors already taking aim at Apple M1 Macs

The first instance of malicious code native to Apple Silicon M1 Macs emerged a month after the release of devices equipped with the company’s in-house CPUs

The post Malware authors already taking aim at Apple M1 Macs appeared first on WeLiveSecurity

18 February 2021