Oktacron - Cyber Security RSS Feeds History

FBI & CISA Warn of Active Attacks on FortiOS Vulnerabilities

cyware Apr 03, 2021 Malware and Vulnerabilities

The FBI and Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) today issued a joint advisory warning admins of active exploits targeting three vulnerabilities in Fortinet FortiOS.

As ransomware stalks the manufacturing sector, victims are still keeping quiet

cyware Apr 03, 2021 Trends, Reports, Analysis

Two years later, Norsk Hydro’s transparency remains an outlier in a manufacturing sector that is increasingly dogged by ransomware attacks during the coronavirus pandemic.

Hunting the hunters: How Russian hackers targeted US cyber first responders in SolarWinds breach

cyware Apr 03, 2021 Trends, Reports, Analysis

After infiltrating US government computer networks early last year as part of the SolarWinds data breach, Russian hackers then turned their attention to the very people whose job was to track them down.

Biden's cyber executive order to include new rules for federal agencies, contractors

cyware Apr 03, 2021 Laws, Policy, Regulations

Under a forthcoming White House order, companies that do business with the federal government would have to meet software security standards and swiftly report cyber incidents to a new entity within the DHS.

Robinhood Warns Customers of Tax-Season Phishing Scams

cyware Apr 03, 2021 Identity Theft, Fraud, Scams

Attackers have targeted customers of stock-trading broker Robinhood with a phishing campaign aimed to steal their credentials and spread malware using fake tax documents, the company has warned.

Qualys: Attackers trying to make breach exposure look worse than it is

cyware Apr 03, 2021 Incident Response, Learnings

Cloud security company Qualys said that follow-up investigations have confirmed that the data breach it suffered in late 2020 and early 2021 was limited to customer data housed on third-party service provider Accellion’s file transfer system.

Capital One notifies more clients of SSNs exposed in 2019 data breach

cyware Apr 03, 2021 Breaches and Incidents

While the breach notification letters might seem out of place almost two years after the incident, they were prompted by new findings while analyzing data stolen during the 2019 security breach.

QNAP caught napping as disclosure delay expires, critical NAS bugs revealed

cyware Apr 03, 2021 Malware and Vulnerabilities

Some QNAP network-attached storage devices are vulnerable to attack because of two critical vulnerabilities, one that enables unauthenticated remote code execution and another that provides the ability to write to arbitrary files.

CNA shares details about ransomware attack, recovery effort

cyware Apr 03, 2021 Incident Response, Learnings

The company, one of the biggest players in cybersecurity insurance specifically, had previously acknowledged an attack, but stopped short of specifying exactly what kind.

Inside the Ransomware Campaigns Targeting Exchange Servers

cyware Apr 03, 2021 Trends, Reports, Analysis

As organizations around the world scrambled to patch critical Microsoft Exchange Server flaws patched last month, criminals upped the ante with multiple ransomware campaigns targeting vulnerable servers.

Asteelflash electronics maker hit by REvil ransomware attack

cyware Apr 03, 2021 Breaches and Incidents

Asteelflash, a leading French electronics manufacturing services company, has suffered a cyberattack by the REvil ransomware operators who is demanding a $24 million ransom.

Attackers Found Abusing GitHub Infrastructure to Mine Cryptocurrency

cyware Apr 03, 2021 Threat Intel & Info Sharing

GitHub launched an investigation in a series of attacks aimed at abusing its infrastructure to illicitly mine cryptocurrency. Such kind of attacks were reported at least since the end of 2020.

Simple Food Website 1.0 SQL Injection

packetstormsecurity Apr 03, 2021 Feed

Simple Food Website version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Rockstar Service Insecure File Permissions

packetstormsecurity Apr 03, 2021 Feed

RockstarService.exe suffers from an insecure file permissions vulnerability.

How Cyrebro Can Unify Multiple Cybersecurity Defenses to Optimize Protection

thehackernews Apr 03, 2021 Feed

Many enterprises rely on more than one security tool to protect their technology assets, devices, and networks. This is particularly true for organizations that use hybrid systems or a combination of cloud and local applications. Likewise, companies whose networks include a multitude of smartphones and IoT devices are likely to deploy multiple security solutions suitable for different scenarios.

Google limits which apps can access the list of installed apps on your device

thehackernews Apr 03, 2021 Feed

Apps on Android have been able to infer the presence of specific apps, or even collect the full list of installed apps on the device. What's more, an app can also set to be notified when a new app is installed. Apart from all the usual concerns about misuse of such a data grab, the information can be abused by a potentially harmful app to fingerprint other installed apps, check for the presence

Cyber security aggregator - feeds history

FBI & CISA Warn of Active Attacks on FortiOS Vulnerabilities

As ransomware stalks the manufacturing sector, victims are still keeping quiet

Hunting the hunters: How Russian hackers targeted US cyber first responders in SolarWinds breach

Biden's cyber executive order to include new rules for federal agencies, contractors

Robinhood Warns Customers of Tax-Season Phishing Scams

Qualys: Attackers trying to make breach exposure look worse than it is

Capital One notifies more clients of SSNs exposed in 2019 data breach

QNAP caught napping as disclosure delay expires, critical NAS bugs revealed

CNA shares details about ransomware attack, recovery effort

Inside the Ransomware Campaigns Targeting Exchange Servers

Asteelflash electronics maker hit by REvil ransomware attack

Attackers Found Abusing GitHub Infrastructure to Mine Cryptocurrency

Simple Food Website 1.0 SQL Injection

Rockstar Service Insecure File Permissions

How Cyrebro Can Unify Multiple Cybersecurity Defenses to Optimize Protection

Google limits which apps can access the list of installed apps on your device

202020212022202320242025