Items tagged with cybersecurity
by
Nathan Ord - Fri, Jul 16, 2021
Just as there is a traditional weapons market, a private sector cyberweapons market enables people and organizations to attack anyone worldwide for a fee. However, Microsoft takes this threat of cyberweapons seriously, and is now working...
Read more...
by
Nathan Ord - Thu, Jul 15, 2021
Earlier this year, a vulnerability within Apple’s WebKit for Safari was discovered by Google’s Threat Analysis Group (TAG) and then tracked as CVE-2021-1879. Now, it is reported that this vulnerability was likely exploited by a familiar...
Read more...
by
Nathan Ord - Wed, Jul 14, 2021
It appears that REvil, the threat actor group behind attacks on JBS Global and Kaseya, among others, has gone dark. While this could be a good thing, it may not be worth holding your breath as there are other explanations for REvil...
Read more...
by
Nathan Ord - Wed, Jul 14, 2021
Yesterday, Microsoft reported that it had detected a 0-day remote code execution exploit being used in the wild against SolarWinds’ Serv-U FTP product. The vulnerability that allowed this exploit has since been patched, but it is still...
Read more...
by
Nathan Ord - Tue, Jul 06, 2021
Over the weekend, cybersecurity experts, forensics teams, and white-hat hackers worldwide have been battling the ransomware incident affecting Kaseya VSA customers. Now, the Florida-based IT and remote management company is reporting that...
Read more...
by
Nathan Ord - Mon, Jul 05, 2021
Over the holiday weekend, the popular battle royale game Apex Legends was hacked, but not in the way you may expect. Rather than stealing data, encrypting files, or being generally destructive, the hackers broadcasted a message stating...
Read more...
by
Nathan Ord - Sun, Jul 04, 2021
Before the holiday weekend got underway, the REvil hacking group kicked off a massive supply chain attack involving remote management software company Kaseya. Based out of Florida, the company only reports that 40 of its remote monitoring...
Read more...
by
Nathan Ord - Sat, Jul 03, 2021
Hacking group REvil, which was behind attacks such as those on Acer in early 2021, has returned in force evidently, after approximately 200 U.S. businesses were hit by ransomware overnight. It has been found that the ransomware spread...
Read more...
by
Nathan Ord - Fri, Jul 02, 2021
Over the last couple of days, a vulnerability tracked as CVE-2021-34527 has made the rounds, making IT people quite nervous. The cybersecurity threat, also dubbed PrintNightmare, exploits a flaw within the Windows Print Spooler, allowing...
Read more...
by
Nathan Ord - Thu, Jul 01, 2021
As cybersecurity solutions tighten up and prevent many attacks, threat actors are looking for new and innovative ways to attack systems. This has led to a rise in attacks that start “outside and below the operating system layer,” such as...
Read more...
by
Nathan Ord - Tue, Jun 29, 2021
Last week, hundreds if not thousands of My Book Live customers awoke to their devices being wiped and, in some cases, unrecoverable. At that time, it was simply thought that Western Digital had not patched a critical vulnerability from...
Read more...
by
Nathan Ord - Fri, Jun 18, 2021
When people are hit by malware, it typically ends with files being locked or some other terrible outcome for the end-user. However, researchers have now discovered a piece of malware that turns the tables on people who try to pirate...
Read more...
by
Nathan Ord - Sat, Jun 12, 2021
Sometimes you may not know that you have been infected with malware until it is too late, as is likely the case for users across more than three million Windows-based computers globally. In a stunning revelation, in the two years between...
Read more...
by
Nathan Ord - Sat, Jun 12, 2021
A seven-year-old local privilege escalation bug has reared its head and finally got a fix. When it was available, exploiting the vulnerability in the polkit authentication service could have allowed attackers to get a root shell on several...
Read more...
by
Nathan Ord - Fri, Jun 11, 2021
The Golden Arches are not so shiny today it seems, as the world's biggest fast-food chain, McDonald's, has been hit by an international data breach. The company reported today that hackers have stolen data containing employee and...
Read more...
by
Nathan Ord - Thu, Jun 10, 2021
Cybersecurity is a hot topic nowadays, with attacks happening frequently like the Colonial Pipeline or JBS Global ransomware attacks. Now, it appears that EA is facing its own issues after hackers allegedly managed to exfiltrate around...
Read more...
by
Nathan Ord - Mon, Jun 07, 2021
In May, the biggest fuel provider to the U.S. eastern seaboard was hit with ransomware from Russian hacking group DarkSide. Colonial Pipeline decided to pay the ransom to decrypt some of its files to get back to operational status, but...
Read more...
by
Nathan Ord - Wed, Jun 02, 2021
Though industrial cyberattacks, such as those on JBS Global or Colonial Pipeline, are on the rise, the problem is not exclusive to businesses. According to new research, consumer cyber threats jumped nearly 83% in 2020. With new types of...
Read more...
by
Nathan Ord - Tue, Jun 01, 2021
Cybersecurity incidents are on the rise as of late, leaving companies floundering and threat actors perhaps a little richer. The world’s biggest meat processing company JBS has been added to the list, confirming that it recently fell...
Read more...
by
Nathan Ord - Mon, May 31, 2021
Late last week, we reported that the SolarWinds hackers from last year, called Nobelium, were back in action targeting NGOs around the world, according to data from Microsoft. Now, the Redmond-based company is providing an update on its...
Read more...
by
Nathan Ord - Fri, May 28, 2021
The threat actors behind the SolarWinds attacks late last year have come back online and are targeting international development, humanitarian, and human rights organizations, according to new data from Microsoft. The Russian-based hacking...
Read more...
by
Nathan Ord - Fri, May 21, 2021
Cloud-based additions to mobile apps have become commonplace, but they are not always the best thing for consumers or developers. According to new research, by either misconfiguration or simple lack of security best practices, some mobile...
Read more...