Cyber security aggregate rss news

Cyber security aggregator - feeds history

totals: cyware (11) packetstormsecurity (2)

NVIDIA Patches AMI BMC Vulnerabilities Impacting Several Major Vendors

cyware Oct 31, 2020 Malware and Vulnerabilities

The vulnerabilities were reported to NVIDIA by members of the SCADA StrangeLove project, which focuses on ICS/SCADA security, as part of their research into ML infrastructure vulnerabilities.

Montreal Metro Hacker Demands $2.8m Ransom

cyware Oct 31, 2020 Incident Response, Learnings

A hacker that attacked Montreal's transit agency with malware has demanded a ransom of US $2.8m to restore normal network operations. However, the incident did not impact the city's metro services.

Firestarter Android Malware Abuses Google Firebase Cloud Messaging

cyware Oct 31, 2020 Malware and Vulnerabilities

An APT group uses Firebase Cloud Messaging (FCM), which is a cross-platform cloud solution for messages and notifications for Android, iOS, and web applications to bypass detection.

Operation Earth Kitsune: Hackers target the Korean diaspora

cyware Oct 31, 2020 Malware and Vulnerabilities

Researchers at Trend Micro have disclosed details about a new watering hole campaign targeting the Korean diaspora that exploits flaws in web browsers to deploy backdoors.

Health sector mobilizes defenses following Ryuk ransomware warning

cyware Oct 31, 2020 Trends, Reports, Analysis

A day after U.S. federal agencies warned of an “imminent” ransomware threat to hospitals, it’s an all-hands-on-deck mentality for a health sector already strained by the coronavirus pandemic.

Critical OpenEMR Vulnerabilities Give Hackers Remote Access to Health Records

cyware Oct 31, 2020 Malware and Vulnerabilities

Several vulnerabilities found by researchers in the OpenEMR software can be exploited by remote hackers to obtain medical records and compromise healthcare infrastructure.

Alibaba-owned Lazada suffers data hack of 1.1 million accounts

cyware Oct 31, 2020 Breaches and Incidents

Singapore firm Lazada said that personal information including addresses and partial credit card numbers from 1.1 million accounts had been hacked, a major breach in the city-state of 5.7 million.

Google discloses Windows zero-day exploited in the wild

cyware Oct 31, 2020 Malware and Vulnerabilities

The zero-day is expected to be patched on November 10, which is the date of Microsoft's next Patch Tuesday, according to Ben Hawkes, team lead for Project Zero, Google's vulnerability research team.

U.S. says Iranian hackers behind threatening emails accessed voter data

cyware Oct 31, 2020 Geopolitical, Terrorism

U.S. officials said late Friday that the Iranian hackers behind a wave of threatening emails sent to thousands of Americans earlier this month successfully accessed voter data.

New Wroba Campaign Is Latest Sign of Growing Mobile Threats

cyware Oct 31, 2020 Malware and Vulnerabilities

A new malware campaign targeting Android and iOS smartphone device owners in the US is the latest sign that mobile devices are becoming the next big target for cyberattackers.

Cyberattack hits Vermont network, including 6 hospitals

cyware Oct 31, 2020 Breaches and Incidents

A cyberattack has caused significant, ongoing computer network problems for the University of Vermont Health Network, affecting its six hospitals in Vermont and New York.