Apple Patches 3 More Zero-Days Under Active Attack

One of the bugs, which affects macOS as well as older versions of iPhones, could allow an attacker to execute arbitrary code with kernel privileges.

This ransomware-dropping malware has swapped phishing for a sneaky new attack route

And it's using cryptographically signed bogus Java apps to avoid detection.

FBI arrests 75-year-old for allegedly placing pipe bombs outside phone, carrier stores

The suspect was reportedly upset over handsets being used to spread "immoral content."

Stop worrying that crims could break the 'net, say cyber-diplomats – only nations have tried

Global Commission on the Stability of Cyberspace is a bit miffed its 'Don't attack the internet core' norm is misunderstood The Global Commission on the Stability of Cyberspace (GCSC) is worried its guidance on preventing the internet and all it connects ...

Apple releases patches for Catalina and iOS 12.5.5 vulnerabilities

One of the vulnerabilities was discovered by Citizen Lab and another was found by the Google Threat Analysis team.

5 Tips for Achieving Better Cybersecurity Risk Management

Casey Ellis, founder, CTO and chairman of Bugcrowd, discusses a roadmap for lowering risk from cyberattacks most effectively.

100M IoT Devices Exposed By Zero-Day Bug

A high-severity vulnerability could cause system crashes, knocking out sensors, medical equipment and more.

FamousSparrow APT Spies On Hotels, Governments

Home alone after school: A safety guide for kids

Our guide was created to help families prepare for a child being home alone. Use this safety guide to help your kids prepare to stay safe when they're on their own.

Google Report Spotlights Uptick in Controversial ‘Geofence Warrants’ by Police

Digital privacy rights defenders contend that geofencing warrants grab data on everyone near a crime, without cause.

ROT8000

ROT8000 is the Unicode equivalent of ROT13. What’s clever about it is that normal English looks like Chinese, and not like ciphertext (to a typical Westerner, that is).

Acronis Offers up to $5,000 to Users Who Spot Bugs in Its Cyber Protection Products

Once available only to the cybersecurity community, Acronis has opened its bug-hunting program to the public and aims to double the total bounties paid.

VoIP company battles massive ransom DDoS attack

'Massive' distributed denial of service attack hits internet telephony company.

Ransomware attackers targeted this company. Then defenders discovered something curious

Cybersecurity researchers detail a mysterious attack that uses sophisticated techniques to deliver a relatively unsophisticated ransomware. The question is, why?

Researchers finger new APT group, FamousSparrow, for hotel attacks

Espionage motive mooted in attacks which hit industry, government too Researchers at security specialist ESET claim to have found a shiny new advanced persistent threat (APT) group dubbed FamousSparrow - after discovering its custom backdoor, SparrowDoor, ...

New advanced hacking group targets governments, engineers worldwide

The APT was one of many groups that took part in the Microsoft Exchange Server hacks.

CISA releases advisory on Conti ransomware, notes increase in attacks after more than 400 incidents

CISA did a deep dive on the Conti ransomware, providing information for those protecting organizations.

Druva's 'curated recovery' aimed at faster ransomware incident resolution

New addition to security platform recovers individual files in their most recent 'clean' state.

Apple tried to patch this security hole in macOS Finder but didn't consider upper and lowercase characters

file:// is blocked? Oh OK, we'll just use File:// or fiLE://... Apple's macOS Finder application is currently vulnerable to a remote code execution bug, despite an apparent attempt to fix the problem.…

Crystal Valley Farm Coop Hit with Ransomware

It's the second agricultural business to be seized this week and portends a bitter harvest with yet another nasty jab at critical infrastructure.

UK MoD Data Breach Shows Cybersecurity Must Protect Both People and Data

The UK MoD has failed to protect personally identifiable information (PII) for Afghan interpreters; the incident highlights how avoidable cybersecurity mistakes can have devastating consequences.

Unpatched Apple Zero-Day in macOS Finder Allows Code Execution

All a user needs to do is click on an email attachment, and boom -- the code is silently executed without the victim knowing. It affects Big Sur and prior versions of macOS.

How REvil May Have Ripped Off Its Own Affiliates

A newly discovered backdoor and double chats could have enabled REvil ransomware-as-a-service operators to hijack victim cases and snatch affiliates’ cuts of ransom payments.

Lithuania says throw away Chinese phones due to censorship concerns

Software filters for phrases.

Confluence Code Exec Flaw Being Used By Crypto Miners

VMware Warns of Ransomware-Friendly Bug in vCenter Server

VMware urged immediate patching of the max-severity, arbitrary file upload flaw in Analytics service, which affects all appliances running default 6.5, 6.7 and 7.0 installs.

Best VPN for Windows PC 2021

Are you looking for a VPN service provider with good Windows performance? In this article, we spotlight four providers who offer excellent support for Windows and laptop users.

TikTok, GitHub, Facebook Join Open-Source Bug Bounty

The initiative, run by HackerOne, aims to uncover dangerous code repository bugs that end up going viral across the application supply-chain.

This cryptocurrency miner is exploiting the new Confluence remote code execution bug

It didn't take long for CVE-2021-26084 to be added to exploit kits.

Microsoft Autodiscover abused to collect web requests, credentials

Researchers were able to exploit a protocol design feature on a vast scale.

Microsoft Exchange Autodiscover protocol found leaking hundreds of thousands of credentials

DDoS attacks are becoming more prolific and more powerful, warn cybersecurity researchers

A report warns about a rise in DDoS attacks as cyber criminals get more creative with ways to make campaigns more disruptive.

Break out your emergency change process and patch this ransomware-friendly bug ASAP, says VMware

File upload vuln lets miscreants hijack vCenter Server VMware has disclosed a critical bug in its flagship vSphere and vCenter products and urged users to drop everything and patch it. The virtualization giant also offered a workaround.…

US Feds sat on REvil decryption key for three weeks: report

Wanted to use it to disrupt ransomware raiders.

Zoom's $14.7 billion deal for Five9 under US national security review

A government review into the Zoom-Five9 deal will result in the deal's application for approval being halted for the time being.

Database containing personal info on 106m people who traveled to Thailand found open to the internet – report

Misconfigured Elasticsearch server blamed A database containing personal information on 106 million international travelers to Thailand was exposed to the public internet this year, a Brit biz claimed this week.…

Epik Confirms Hack, Gigabytes of Data on Offer

"Time to find out who in your family secretly ran ... [a] QAnon hellhole," said attackers who affiliated themselves with the hacktivist collective Anonymous, noting that Epik had laughable security.

Google unveils results of DevOps report, finding increase in public cloud use

More than half of all respondents said they used a public cloud, a 5% bump compared to 2019, and 21% additionally said they deploy multiple public clouds.

Hackers Are Going ‘Deep-Sea Phishing,’ So What Can You Do About It?

Nick Kael, CTO at Ericom, discusses how phishing is gaining sophistication and what it means for businesses.

Turla APT Plants Novel Backdoor In Wake of Afghan Unrest

“TinyTurla,” simply coded malware that hides away as a legitimate Windows service, has flown under the radar for two years.

Nation-State Group Breaches Alaska Department Of Health

Nutanix announces new features for Cloud Platform

Nutanix is launching AOS version 6, Nutanix Era and other new tools to help customers manage data and build out software-defined data centers.

BlackMatter Strikes Iowa Farmers Cooperative, Demands $5.9M Ransom

Critical infrastructure appears to be targeted in latest ransomware attack, diminishing the hopes of governments to curb such attacks.

46% of On-Prem Databases Globally Contain Vulnerabilities: Is Yours Safe?

Are organizations neglecting the security of their data? An unprecedented five-year study reveals that internal databases are riddled with vulnerabilities – some even years old.

Four months on from sophisticated cyberattack, Alaska's health department is still recovering

Alaska is still dealing with the fallout of a hack - and its health department warns members of the public their personal data might have been stolen, too.

Turla hacking group launches new backdoor in attacks against US, Afghanistan

The Russian cyberattackers are using the new module to become more stealthy.

UK Ministry of Defence apologises after Afghan interpreters' personal data exposed in email blunder

We joke about lethal consequences of failure but this isn't funny The UK's Ministry of Defence has launched an internal investigation after committing the classic CC-instead-of-BCC email error – but with the names and contact details of Afghan interpret ...

Alaska’s Department of Health and Social Services Hack

Apparently, a nation-state hacked Alaska’s Department of Health and Social Services. Not sure why Alaska’s Department of Health and Social Services is of any interest to a nation-state, but that’s probably just my failure of imagination.

You’ve trained at the cutting edge, here’s how to keep your DFIR skills razor sharp

Sometimes the most important tool is a bookmark Sponsored  There’s nothing like five or six days of in-depth training with SANS Institute to develop cutting-edge Digital Forensics and Incident Response security skills.…

Trend Micro launches first data centre region in Australia

The Sydney-based Trend Micro data centre region is expected to be one of many globally planned for launch by the security giant.

Amazon Driver-Surveillance Cameras Roll Out, Sparking Debate

Drivers bristle under constant surveillance by artificial-intelligence (AI) tech, but Amazon says it works and boosts safety.

Apache OpenOffice can be hijacked by malicious documents, fix still in beta

If you need another reason to try an alternative software suite Apache OpenOffice (AOO) is currently vulnerable to a remote code execution vulnerability and while the app's source code has been patched, the fix has only been made available as beta softwar ...

BSidesSF Call For Papers Announced

FBI Says $133 Million Lost In Romance Scams In 2021

Epik Data Breach Affects 15 Million Users, Including Non-Customers

Google Announces Major Privacy Change Coming To Android

Bring Your APIs Out of the Shadows to Protect Your Business

APIs are immensely more complex to secure. Shadow APIs—those unknown or forgotten API endpoints that escape the attention and protection of IT¬—present a real risk to your business. Learn how to identify shadow APIs and take control of them before at ...

Google: This major app change is coming to billions of Android devices soon

Google is rolling out a privacy-enhancing answer to all those forgotten and unused Android apps once granted access to your sensitive data.

Facebook rebukes WSJ over investigation on the platform's ability to harm, 'toxic' impact

Facebook says the series contains "deliberate mischaracterizations.&quo
t;

Victoria embarks on govt cyber security uplift

Sets out five-year cyber security plan.

Get two extra displays for your laptop plus a lifetime of powerful VPN protection

Now you can take your ninja multitasking skills on the road, plus browse and work online worry-free forever.

TTEC hit with ransomware attack, hampering work for major clients

KrebsonSecurity reported that teams servicing Bank of America, Verizon and others were unable to work.

Yes, of course, there's now malware for Windows Subsystem for Linux

Once dismissed proof-of-concept attack on Microsoft OS through WSL detected in the wild Linux binaries have been found trying to take over Windows systems in what appears to be the first publicly identified malware to utilize Microsoft's Windows Subsystem ...

Friday Squid Blogging: Ram’s Horn Squid Shells

You can find ram’s horn squid shells on beaches in Texas (and presumably elsewhere). As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here.

Cryptocurrency Launchpad Hit By $3 Million Supply Chain Attack

Telegram Emerges As New Dark Web For Cyber Criminals

Tesla To Work With Global Regulators On Data Security

Microsoft MSHTML Flaw Exploited By Ryuk Ransomware Gang

Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang

Microsoft and RiskIQ researchers have identified several campaigns using the recently patched zero-day, reiterating a call for organizations to update affected systems.

Zero-Click iMessage Exploit

Citizen Lab released a report on a zero-click iMessage exploit that is used in NSO Group’s Pegasus spyware. Apple patched the vulnerability; everyone needs to update their OS immediately. News articles on the exploit.

This banking Trojan abuses YouTube to manage remote settings

The spam-spread malware is another headache for Latin America in the cybersecurity realm.

Cyberattacks against the aviation industry linked to Nigerian threat actor

The investigation began after a Microsoft tweet concerning AsyncRAT.

CISA, FBI: State-Backed APTs May Be Exploiting Critical Zoho Bug

The newly identified bug in a Zoho single sign-on and password management tool has been under active attack since early August.

IAG is restructuring its security operations

'Fuses' functions together to form a new division.

Facebook targets harmful real networks using playbook against fakes

Adopts more aggressive approach.

Aviation-themed phishing campaign pushed off-the-shelf RATs into inboxes for 5 years

Not all promises of international flight itineraries are real, warns Cisco Talos A phishing campaign that mostly targeted the global aviation industry may be connected to Nigeria, according to Cisco Talos.…