Items tagged with security
by
Brandon Hill - Thu, May 13, 2021
We first learned of the cyberattack on Colonial Pipeline's computer systems last week. The company's extensive pipeline network is responsible for supplying the bulk of the United States East Coast with gasoline, diesel, and jet fuel. The...
Read more...
by
Nathan Ord - Wed, May 12, 2021
Yesterday was Microsoft’s routine Patch Tuesday release, which tackled quite a few vulnerabilities, 55 to be exact. Though this may seem like a lot, it is actually the smallest update from the company since 2020, but it does take care of...
Read more...
by
Paul Lilly - Wed, May 12, 2021
A researcher who has helped shaped Wi-Fi security has once again discovered a series of vulnerabilities affecting all Wi-Fi devices dating back to 1997. Fortunately, many of the security holes are difficult to exploit, and according to the...
Read more...
by
Nathan Ord - Mon, May 10, 2021
Yesterday, we reported on a ransomware attack that targeted Colonial Pipeline, and by association, the eastern seaboard after the company had to shut off its pipeline network. Now, the FBI has tied the ransomware attack on the fuel company...
Read more...
by
Nathan Ord - Mon, May 10, 2021
When it was found that Microsoft Exchange on-premises was vulnerable to hackers, quite a bit of havoc ensued across a wide range of industries. Since then, the FBI obtained a court order to go in and remove backdoors to hacked servers, but...
Read more...
by
Nathan Ord - Sun, May 09, 2021
Last week, cybersecurity researchers discovered an open Elasticsearch database that exposed an extensive fake Amazon reviews scam ring. The database contained millions of direct messages between Amazon vendors and upwards of 200,000...
Read more...
by
Nathan Ord - Sun, May 09, 2021
One of the top U.S. fuel pipeline operators had to shutter its network this weekend due to a nasty ransomware attack. This effectively shut down approximately half of the East Coast’s fuel for both air and ground transportation. Though...
Read more...
by
Brandon Hill - Wed, May 05, 2021
Dell is one of the most popular PC brands globally, selling millions of laptops, desktops, and server systems to everyday consumers and businesses alike each year. However, SentinelLabs researchers warned this week that five critical...
Read more...
by
Nathan Ord - Tue, May 04, 2021
AI is spreading, and not in the creepy sci-fi dystopian kind of way, but by way of programs to help manage large tasks in critical business sectors, such as healthcare, finance, and defense. Now, Microsoft is releasing a tool called...
Read more...
by
Nathan Ord - Tue, May 04, 2021
At the start of May, researchers at the University of Virginia announced that current Spectre chip vulnerability mitigations could be bypassed entirely, bringing the ghostly security flaw back to life. Intel has now officially responded by...
Read more...
by
Nathan Ord - Sat, May 01, 2021
Back in 2018, a processor security vulnerability called Spectre appeared, affecting all modern CPU architectures from Intel, AMD, and even ARM in the last 20 years. Since then, major players and semiconductor OEMs have worked hard to patch...
Read more...
by
Nathan Ord - Wed, Apr 28, 2021
If you catch the flu, you may be stuck at home or even bedridden for a few days until you get better. If you catch the FluBot malware, you could be at risk of losing sensitive information, such as banking details and personal information...
Read more...
by
Nathan Ord - Wed, Apr 28, 2021
Last week, the CEO of messaging app Signal got his hands on Cellebrite software, which is typically used for extracting data from mobile devices. Several security vulnerabilities were discovered with this acquisition, leading to Signal...
Read more...
by
Nathan Ord - Tue, Apr 27, 2021
Given that data leaks are occurring even more frequently these days, it is a matter of when, not if, your information makes it to the open web. Cybercriminals are constantly on the prowl looking for a new way to make a quick buck, and...
Read more...
by
Paul Lilly - Tue, Apr 27, 2021
The same group of hackers that hit the NBA's Houston Rockets basketball team with a ransomware attack earlier this month has now turned its sights on the police force in Washington, D.C. It is the latest in a string of concerning...
Read more...
by
Nathan Ord - Mon, Apr 26, 2021
From time to time, malware will pop up that affects Apple devices which are typically touted as the superior option to other PCs for their security. This happened earlier this year with the mysterious Silver Sparrow malware that caught...
Read more...
by
Nathan Ord - Mon, Apr 26, 2021
When we hear of ransomware attacks, it usually involves high-value targets, such as the recent $50 million attack against Apple supplier Quanta. This time, a ransomware gang took a different approach and targeted consumers and small...
Read more...
by
Ben Funk - Sun, Apr 25, 2021
When it comes to password management, users really have just a handful of options, and all of them have their caveats. If we choose to just use memorable passwords and recycle them between accounts, one account becoming compromised can...
Read more...
by
Paul Lilly - Sun, Apr 25, 2021
The United States government has quietly handed over management of around 175 million traditional internet addresses (IPV4) to Global Resource Systems LLC, a small company in Florida, as part of a "pilot effort" to look for security...
Read more...
by
Paul Lilly - Sat, Apr 24, 2021
With all due apologies for the disappointing news, you did not win a set of Apple AirPods, no matter what that unsolicited text message you received may have said. The text message is a scam attempt, plain and simple. It has gotten so big...
Read more...
by
Paul Lilly - Fri, Apr 23, 2021
After a Reddit user alerted AMD to vulnerabilities within its web store that was making it easy for bots to buy hard-to-get graphics cards and other hardware before us regular folk ever stood a chance, it made some back-end changes and...
Read more...
by
Nathan Ord - Thu, Apr 22, 2021
Israeli-based digital intelligence company Cellebrite provides software that enables the extraction of data from devices. While law enforcement loves this, it raises ire from phone manufacturers and individuals alike, with privacy concerns...
Read more...