News
-
"IT Services Giant Conduent Suffers Ransomware Attack, Data Breach"The IT services giant Conduent recently faced a ransomware attack that impacted its European operations. Conduent provides services, including human resources and payments infrastructure for most Fortune 100 companies and more than 500 governments.… -
"Cyber LEAP Act Aims for Innovations Through Cybersecurity Grand Challenges"The Senate Commerce Committee has approved the Cybersecurity Competitions to Yield Better Efforts to Research the Latest Exceptionally Advanced Programs, or Cyber LEAP Act of 2020, which aims to set up cybersecurity competitions across the US that will…
-
"Botnet Blasts WordPress Sites With Configuration Download Attacks"Researchers at WordFence have found that a million different WordPress sites have received malicious requests designed to shake loose their wp-config.php files over the past month. The researchers believe that these attacks were orchestrated using…
-
"Malicious Android Apps Double in Q1 as Lockdown Users Are Targeted"According to new data from the mobile technology company Upstream, the number of malicious Android Apps detected in the first quarter of 2020 doubles the number discovered last year during the same period. The company's Secure-D platform identified more…
-
"Most Active Ransomware Strains Targeting Enterprise Networks"A study conducted by Beazley Breach Response (BBR), found that over 70 percent of ransomware attacks reported by the company's customers in 2018 targeted small-to-medium-sized businesses (SMBs). Researchers believe that SMBs are at a higher risk of being…
-
"New Ransomware Trends Spotted: Auctioning Stolen Files, Cybergangs Joining Forces"Human-operated ransomware continues to grow more intense. In addition to worrying about system disruption, file encryption, and exposure, one may now have to decide whether to pay the demanded ransom or face having their stolen files sold in an online…
-
"Cyber Commission: Expand Connected Device Security Bill Beyond Federal Procurement Realm"The proposed Internet of Things Cybersecurity Improvement Act of 2019 would require connected devices sold to the federal government to meet certain cybersecurity requirements. The Cyberspace Solarium Commission released a new white paper, calling for…
-
"VMware Flaw Allows Takeover of Multiple Private Clouds"Researchers at a security pen-testing company called Citadelo found that VMware’s VMware Cloud Director has a security flaw that could be exploited to compromise multiple customer accounts using the same cloud infrastructure. The vulnerability was…
-
"Amtrak Breached, Some Customers’ Logins And PII Potentially Exposed"Amtrak, the national rail service for the US, has suffered a data breach. A third party got unauthorized access to some Amtrak Guest Rewards accounts on the evening of April 16. Researchers discovered that the adversary used compromised…
-
"This Bot Hunts Software Bugs for the Pentagon"ForAllSecure, a Carnegie Mellon University startup, developed a tool called Mayhem that examines software to find security flaws. The U.S. Air Force, Navy, and Army, as well as the internet infrastructure company Cloudflare uses Mayhem as a part of their…
-
"Users Rarely Change Passwords after a Breach – or They Choose a Weaker Password"A recent study conducted by Carnegie Mellon University's CyLab finds that users rarely change their passwords for accounts on breached domains. According to one researcher, only 13 percent of users changed their passwords within the first three months of…
-
"Hackers Sell 80K Stolen Credit Card Details on Dark Web"The cybersecurity research firm Cyble discovered a data leak involving details of more than 80,000 credit cards. Threat actors are selling this information on the dark web market in exchange for cryptocurrency. The dump of stolen credit card details…