Cybersecurity News
Targeted Attack Activity Heightens Need for Orgs. to Patch New SolarWinds Flaw
A China-based threat actor -- previously observed targeting US defense industrial base organizations and software companies -- is exploiting the bug in SolarWinds' Serv-U software, Microsoft says.14 July 2021
Cryptominer Farm Rigged with 3,800 PS4s Busted in Ukraine
Ukrainian cops seize PlayStation 4 consoles, graphics cards, processors and more in cryptomining sting involving alleged electricity theft.
14 July 2021
Did the Cybersecurity Workforce Gap Distract Us From the Leak?
Cyber games can play a critical role in re-engaging our workforce and addressing the employee retention crisis.14 July 2021
Linux-Focused Cryptojacking Gang Tracked to Romania
The gang is using a new brute-forcer – “Diicot brute” – to crack passwords on Linux-based machines with weak passwords.
14 July 2021
Apps Built Better: Why DevSecOps is Your Security Team’s Silver Bullet
Phil Richards, vice president and CSO at Ivanti, explains how organizations can design DevOps processes and systems to thwart cyberattacks.
14 July 2021
Trickbot Malware Rebounds with Virtual-Desktop Espionage Module
The attackers have spruced up the 'vncDll' module used for spying on targets and stealing data.
14 July 2021
10 Mistakes Companies Make In Their Ransomware Responses
Hit by ransomware? These missteps can take a bad scenario and make it even worse.
14 July 2021
Microsoft Patch Tuesday fixes 13 critical flaws, including 4 under active attack
The latest Patch Tuesday brings a new batch of security updates addressing a total of 117 vulnerabilities
The post Microsoft Patch Tuesday fixes 13 critical flaws, including 4 under active attack appeared first on WeLiveSecurity
14 July 2021
4 Integrated Circuit Security Threats and How to Protect Against Them
Little-understood threats involving the IC supply chain are putting organizations around the world at risk.14 July 2021
Updated Joker Malware Floods into Android Apps
The Joker premium billing-fraud malware is back on Google Play in a fresh onslaught, with an updated bag of tricks to evade scanners.
14 July 2021
Does cybercrime impact cryptocurrency prices? Researchers find out
Memestocks can ramp up with hype: can crypto do the same due to criminality?14 July 2021
Windows Hello Bypass Fools Biometrics Safeguards in PCs
A Windows security bug would allow an attacker to fool a USB camera used in the biometric facial-recognition aspect of the system.
14 July 2021
US charges Greek national for selling insider trading subscriptions in the Dark Web
"TheBull" offered customers insider information, tips, and pre-release earnings.14 July 2021
Thousands of PS4s seized in Ukraine in illegal cryptocurrency mining sting
The cryptocurrency farm was hidden in an old warehouse.14 July 2021
New Phishing Campaign Targets Individuals of Interest to Iran
TA453 group spoofed two scholars at University of London to try and gain access to email inboxes belonging to journalists, think tank personnel, academics, and others, security vendor says.13 July 2021
Microsoft Patch Tuesday, July 2021 Edition
Microsoft today released updates to patch at least 116 security holes in its Windows operating systems and related software. A half of dozen of the vulnerabilities addressed today are under active attack, according to Microsoft.13 July 2021
Microsoft Crushes 116 Bugs, Three Actively Exploited
Microsoft tackles 12 critical bugs, part of its July 2021 Patch Tuesday roundup, capping a ‘PrintNightmare’ month of headaches for system admins.
13 July 2021
Microsoft Patches 3 Windows Zero-Days Amid 117 CVEs
The July Patch Tuesday release also includes the out-of-band fix for the Windows Print Spooler remote code execution flaw under attack.13 July 2021
Ransomware Giant REvil’s Sites Disappear
Just days after President Biden demanded that Russian President Putin shut down ransomware groups, the servers of one of the biggest groups mysteriously went dark.
13 July 2021
Guess Fashion Brand Deals With Data Loss After Ransomware Attack
An attack on Guess compromised the personal and banking data of 1,300 victims.
13 July 2021