U.S., allies warn of rising recent and future attacks on managed service providers

Written by AJ Vicens May 11, 2022 | CYBERSCOOP Cybersecurity authorities in the U.S., U.K., Australia, Canada and New Zealand released a joint advisory Wednesday warning that they “expect malicious…

Victims awarded $18 million in GirlsDoPorn online video case, boss on the run

Hundreds of victims involved in the non-consensual release of explicit videos online have been awarded video rights and millions of dollars in damages.  On Wednesday, the US Department of Justice…

Log4j flaw: Now state-backed hackers are using bug as part of attacks, warns Microsoft

State-sponsored hackers from China, Iran, North Korea and Turkey have started testing, exploiting and using the Log4j bug to deploy malware, including ransomware, according to Microsoft.    As predicted by…

Singapore-South Korea digital economy deal to sync up on data, payments

Singapore has finalised negotiations with South Korea on a digital economy agreement that will see both nations collaborate across several areas, including cross-border online payments, data flows, cryptography, and artificial…

Second Log4j vulnerability discovered, patch already released

more coverage A second vulnerability involving Apache Log4j was found on Tuesday after cybersecurity experts spent days attempting to patch or mitigate CVE-2021-44228.  The description of the new vulnerability, CVE 2021-45046, says…

Log4j flaw puts hundreds of millions of devices at risk, says US cybersecurity agency

Top US government cybersecurity officials fear advanced hackers will have a field day with the Log4j vulnerability that’s likely present in hundreds of millions of devices.  Security experts are already seeing…

CISA warns 'most serious' Log4j vulnerability likely to affect hundreds of millions of devices

Written by Tim Starks Dec 13, 2021 | CYBERSCOOP Cybersecurity and Infrastructure Security Agency Director Jen Easterly told industry leaders in a phone briefing Monday that a vulnerability in a…

Log4j zero-day flaw: What you need to know and how to protect yourself

A flaw in Log4j, a Java library for logging error messages in applications, is the most high-profile security vulnerability on the internet right now and comes with a severity score…

“Sadistic” Online Extortionist Jailed for 32 Years

“Sadistic” Online Extortionist Jailed for 32 Years An online extortionist described by police as “sadistic” and “depraved” has been jailed for 32 years following a string of horrific crimes targeting…

Log4j Critical Vulnerability (CVE-2021-44228): Practical Tips to Protect Your Organisation

What’s going on? Log4j is commonly used in Java applications of all shapes and sizes. Versions up to 2.15.0 have a critical vulnerability which is being actively exploited. Attackers are…