Oktacron - Cyber Security RSS Feeds History

Transatlantic Cable podcast, episode 180

kaspersky Dec 24, 2020 News

With COVID-19 continuing to rain on our holidays, events, and even workplace parties, trying to get everybody together is proving tough. To that end, Dave and Jeff talked with Alexander Ilin, senior internal communications manager here at Kaspersky to learn about his time managing internal events. From tools and apps show more ...

needed, right through to what to do to keep your guests entertained — if you’re looking to host a family Christmas party or even a last-minute business party, be sure to tune in. Like what you hear? Be sure to subscribe!

The Hack Roundup: CISA Guidance Warns Affected Systems May Need to Be Rebuilt

cyware Dec 24, 2020 Govt., Critical Infrastructure

The Cybersecurity and Infrastructure Security Agency released a guide for federal, state, and local government leaders on responding to the hack and an online hub for resources.

SolarStorm Timeline: Details of the Software Supply-Chain Attack

cyware Dec 24, 2020 Incident Response, Learnings

While this is not the first software supply-chain compromise, it may be the most notable, as the attacker was trying to gain widespread, persistent access to a number of critical networks.

Lawmakers want more transparency on SolarWinds breach from State, VA

cyware Dec 24, 2020 Govt., Critical Infrastructure

Two Democratic senators are calling on the departments of State and Veterans Affairs to brief lawmakers on how their agencies have been impacted by the SolarWinds breach.

Credential phishing attack impersonating USPS targets consumers over the holidays

cyware Dec 24, 2020 Identity Theft, Fraud, Scams

The phishing attack impersonating the U.S. Postal Service sought to get victims to give up their credit card credentials and pay a special delivery fee within three days to ensure package delivered.

Windows zero-day with bad patch gets new public exploit code

cyware Dec 24, 2020 Malware and Vulnerabilities

The issue, which advanced hackers exploited as a zero-day in May, is still exploitable but by a different method as security researchers demonstrate with publicly available proof-of-concept code.

U.S. cyber agency says SolarWinds hackers are 'impacting' state, local governments

cyware Dec 24, 2020 Govt., Critical Infrastructure

The CISA said on Wednesday that a sprawling cyber espionage campaign made public earlier this month is affecting state and local governments, although it released few additional details.

Indian pharma firms at high ransomware attack risk in 2021

cyware Dec 24, 2020 Trends, Reports, Analysis

Targeted ransomware attacks on the healthcare and pharma sector will surge in India in 2021 as companies finalize their vaccines to fight Covid-19, a new report said on Wednesday.

92% of all WordPress attacks are on Israeli sites: Report

cyware Dec 24, 2020 Trends, Reports, Analysis

A whopping 92% of all brute-force hacking attacks on WordPress sites around the world in the last few months were targeted at Israeli sites, according to a report by Internet security company F5 Labs.

'UltraRank' JavaScript-Sniffer Attack Campaign Hits Dozen E-Commerce Sites

cyware Dec 24, 2020 Breaches and Incidents

A cybercriminal gang known as "UltraRank" has launched a new campaign, targeting at least a dozen e-commerce sites to steal payment card data using a JavaScript sniffer, says security firm Group-IB.

Fashion Marketplace 21 Buttons Exposes Millions of Users’ Data

cyware Dec 24, 2020 Breaches and Incidents

As discovered by vpnMentor on 2 November 2020 in a research report led by Noam Rotem, it was found that it exposed the data of hundreds of influencers due to an AWS bucket being misconfigured.

Coalition of human rights groups joins suit against Israeli firm NSO

cyware Dec 24, 2020 Trends, Reports, Analysis

A coalition of human rights groups on Wednesday joined Facebook’s lawsuit against Israeli spyware vendor NSO, alleging that the company “prioritizes profit to the detriment of human rights.”

QNAP fixes high severity QTS, QES, and QuTS hero vulnerabilities

cyware Dec 24, 2020 Malware and Vulnerabilities

QNAP has released security updates to fix multiple high severity security vulnerabilities impacting network-attached storage (NAS) devices running the QES, QTS, and QuTS hero operating systems.

Millions of Devices Affected by Vulnerabilities Used in Stolen FireEye Tools

cyware Dec 24, 2020 Trends, Reports, Analysis

Qualys said it identified more than 7.5 million instances related to vulnerabilities associated with the stolen FireEye tools and compromised versions of the SolarWinds Orion product.

Active Chase phishing scam pretends to be fraud alerts

cyware Dec 24, 2020 Identity Theft, Fraud, Scams

A large scale phishing scam is underway that pretends to be a security notice from Chase stating that fraudulent activity has been detected and caused the recipient's account to be blocked.

Citrix confirms ongoing DDoS attack impacting NetScaler ADCs

cyware Dec 24, 2020 Breaches and Incidents

The scope of the attack is limited to just "a small number of customers" at the moment according to Citrix and it impacts all ADCs with Enlightened Data Transport UDP Protocol (EDT) enabled.

Preparing for the challenges of 2021

cyware Dec 24, 2020 Expert Blogs and Opinion

Organizations like the Cybersecurity and Infrastructure Security Agency, local and state governments, and private sector have all taken significant steps to mitigate and respond to cyber incidents.

Google Discloses Poorly-Patched, Now Unpatched, Windows 0-Day Bug

cyware Dec 24, 2020 Malware and Vulnerabilities

Google's Project Zero team has made public details of an improperly patched zero-day security vulnerability in Windows print spooler API that could be leveraged by attackers to execute arbitrary code.

White Ops Announces Its Acquisition

cyware Dec 24, 2020 Companies to Watch

White Ops Announces Its Acquisition A group including Goldman Sachs Merchant Banking Division, ClearSky Security, and NightDragon has purchased the human verification technology company.

Emotet Returns to Hit 100K Mailboxes Per Day

cyware Dec 24, 2020 Malware and Vulnerabilities

“In October the most common secondary payloads were TrickBot, Qakbot and ZLoader; today we observed TrickBot,” according to Brad Haas, a researcher at phishing prevention firm Cofense.

Grid regulator warns utilities of risk of SolarWinds backdoor, asks how exposed they are

cyware Dec 24, 2020 Govt., Critical Infrastructure

The North American electric grid regulator has asked utilities to report how exposed they are to SolarWinds software that is at the center of a suspected Russian hacking operation.

Critical Flaws in Kepware Products Can Facilitate Attacks on Industrial Firms

cyware Dec 24, 2020 Malware and Vulnerabilities

The security holes, two rated critical and one high severity, are described as a stack-based buffer overflow issue, a heap-based buffer overflow issue, and a use-after-free bug.

Ransomware attack confirmed on Vermont Hospital

cyware Dec 24, 2020 Incident Response, Learnings

The IT staff of the Vermont healthcare network said that the ransomware attack was launched through a server vulnerability and the hackers were demanding an enormous sum as ransom.

New cross-layer attack technique raises DNS cache poisoning, user tracking risk

cyware Dec 24, 2020 Malware and Vulnerabilities

The vulnerability allows hackers to mount so-called “cross-layer” attacks against the Linux kernel and cause further damage by exploiting a weakness in its pseudo-random number generator (PRNG).

Travel-booking company Sabre Corp. settles with 27 states over breach of credit card data

cyware Dec 24, 2020 Incident Response, Learnings

Sabre Corp. will make a $2.4 million payout and shore up its cybersecurity policies under an agreement with 27 state attorneys general who investigated a breach of its hotel-booking technology.

HelpSystems Acquires Data Protection Firm Vera

cyware Dec 24, 2020 Companies to Watch

HelpSystems, a Minneapolis, Minnesota-based software company, announced on Wednesday that it has acquired cloud-based data protection solution provider Vera for an undisclosed amount.

Scammers Run COVID-19 Vaccine Fraud Schemes to Fool Users

cyware Dec 24, 2020 Identity Theft, Fraud, Scams

The schemes to defraud people have gone to such an extent that threat actors were found running scams by impersonating biotechnology companies involved in the development of COVID-19 vaccines.

Pay2Key Ransomware’s Mayhem Continues

cyware Dec 24, 2020 Trends, Reports, Analysis

The Pay2Key ransomware is only the latest wave in a series of Iranian based targeted ransomware attacks deployed against Israeli organizations and this appears to be a growing trend.

SolarWinds Hack Continues To Spread: What You Need To Know

packetstormsecurity Dec 24, 2020 headline,hacker,malware,russia,data loss

Hackers Threaten To Leak Plastic Surgery Pictures

packetstormsecurity Dec 24, 2020 headline,hacker,privacy,data loss

Lazarus Group Hits COVID-19 Vaccine Maker In Espionage Attack

packetstormsecurity Dec 24, 2020 headline,malware,virus,cyberwar,science