CyberNews
Republican Governors Association Targeted in Exchange Attacks
Databreach Today – Application Security , Breach Notification , Cyberwarfare / Nation-State Attacks Breach Notification Report Reveals Some PII Could Have Been Exposed Scott Ferguson
AMD CPU driver bug can break KASLR, expose passwords
The Record – AMD has advised Windows users this week to update their operating systems in order to receive a patch for a dangerous vulnerability
TransUnion to Buy Neustar for $3.1B
Dark Reading – Credit rating giant TransUnion will acquire identity resolution firm Neustar in a deal worth $3.1 billion. TransUnion, in its largest acquisition to
FBI, CISA, CGCYBER Warn of APTs Targeting CVE-2021-40539
Dark Reading – Advanced persistent threat attackers are exploiting a newly identified vulnerability in Zoho ManageEngine ADSelfService Plus, according to a joint advisory from the
Bitdefender releases universal decryptor for REvil/Sodinokibi victims hit before July 13
ZDNet – Bitdefender has released a universal decryptor for REvil/Sodinokibi victims infected before July 13, 2021. In a statement, the cybersecurity company said it created the
Airline Credential-Theft Takes Off in Widening Campaign
Threat Post – A spyware effort bent on stealing cookies and logins is being driven by unsophisticated attackers cashing in on the initial-access-broker boom. A
FBI and CISA warn of state hackers exploiting critical Zoho bug
Bleeping Computer – Image: Samueljjohn (CC BY-SA 4.0) The FBI, CISA, and the Coast Guard Cyber Command (CGCYBER) today warned that state-backed advanced persistent threat (APT) groups
New malware uses Windows Subsystem for Linux for stealthy attacks
Bleeping Computer – Security researchers have discovered malicious Linux binaries created for the Windows Subsystem for Linux (WSL), indicating that hackers are trying out new
Universal decryptor key for Sodinokibi, REvil ransomware released
Hack Read – Romania-based cybersecurity firm Bitdefender has released the much-awaited universal decryptor for REvil ransomware victims in collaboration with an undisclosed but trusted law
Grappling With Growth, Employee Needs, and Security Amid a Return to Offices
Dark Reading – Organizations of every size are facing the challenge of the hybrid workforce and the processes around returning to the office. Familiar phrases
FBI: $113 million lost to online romance scams this year
Bleeping Computer – The FBI warned today that a massive spike of online romance scams this year caused Americans to lose more than $113 million since
New Windows security updates break network printing
Bleeping Computer – Windows administrators report wide-scale network printing problems after installing this week’s September 2021 Patch Tuesday security updates. On Tuesday, Microsoft released sixty security
Microsoft Account Passwords Might Soon Be a Thing of the Past
CISO Mag – Almost every cyberattack report mentions user credentials and passwords being stolen and sold on dark web forums. Be it ransomware, malware or
Microsoft: Windows MSHTML bug now exploited by ransomware gangs
Bleeping Computer – Microsoft says multiple threat actors, including ransomware affiliates, are targeting the recently patched Windows MSHTML remote code execution security flaw. In the
Aruba partners with MLS franchise for digitized stadium in Cincinnati
ZDNet – Aruba announced a new partnership with Cincinnati-based Major League Soccer franchise FC Cincinnati that will see the company outfit the team’s 26,000-seat TQL Stadium
CVE-2021-40444 exploitation: Researchers find connections to previous attacks
HelpNet Security – The recent targeted attacks exploiting the (at the time) zero-day remote code execution vulnerability (CVE-2021-40444) in Windows via booby-trapped Office documents have
Google is backing security reviews of these key open source projects
ZDNet – Google recently pledged $100 million to groups that manage open source security priorities and help fix vulnerabilities, and it has now detailed eight of
FTC: Health app and connected device makers must disclose data breaches
The Record – The Federal Trade Commission approved a policy statement Wednesday that warns makers of health apps and connected devices that collect health-related information
Under Pressure: COVID-19 Forced Many Execs to Sideline Cybersecurity
Dark Reading – After polling some 1,000 senior cybersecurity leaders, EY found that CISOs and other security leaders are struggling with inadequate budgets, regulatory fragmentation,
South Africa’s Department of Justice Network Under Ransomware Attack
CISO Mag – Read Aloud The Department of Justice and Constitutional Development of South Africa admitted that its IT systems and operations were disrupted in
How to Protect and Support a Remote Workforce
Hack Read – Remote working amid the COVID19 pandemic has become new normal but for cybercriminals, those working from home are a lucrative target. When
Travis CI Flaw Exposes Secrets of Thousands of Open Source Projects
The Hacker News – Continuous integration vendor Travis CI has patched a serious security flaw that exposed API keys, access tokens, and credentials, potentially putting
Financial Cybercrime: Following Cryptocurrency via Public Ledgers
Threat Post – John Hammond, security researcher with Huntress, discusses a wallet-hijacking RAT, and how law enforcement recovered millions in Bitcoin after the Colonial Pipeline
Universal decryptor released for past REvil ransomware victims
The Record – Romanian cybersecurity firm Bitdefender has published today a universal decryption utility that will be able to help past victims of the REvil
REvil/Sodinokibi Ransomware Universal Decryptor Key Is Out
Threat Post – Bitdefender worked with law enforcement to create a key to unlock victims encrypted in ransomware attacks before REvil’s servers went belly-up on