News
  • "50,000 Phone Numbers Worldwide on List Linked to Israeli Spyware"
    The Israeli cyberarms firm NSO Group, accused of providing spyware to governments, has been linked to a list of 50,000 smartphone numbers, which impacts activists, journalists, business executives, and politicians globally. The firm and its malware have…
  • "Researchers Create New Approach to Detect Brand Impersonation"
    Security researchers at Microsoft created a new method for detecting brand impersonation attacks. These attacks refer to the crafting of content to mimic a trusted company or known brand to trick unsuspecting victims into responding and disclosing…
  • "Researchers Flag 7-Years-Old Privilege Escalation Flaw in Linux Kernel (CVE-2021-33909)"
    Security researchers at Qualy have discovered a vulnerability (CVE-2021-33909) in the Linux kernel’s filesystem layer that may allow local, unprivileged attackers to gain root privileges on a vulnerable host. The security researchers were able to…
  • "HelloKitty Ransomware Is Targeting Vulnerable SonicWall Devices"
    The U.S. Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) warns of the exploitation of a known vulnerability in SonicWall Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) products with end-of-life…
  • "Nasty Linux Systemd Security Bug Revealed"
    Researchers at the cybersecurity firm Qualys found a new Linux systemd security bug. Systemd is a system and services manager for Linux operating systems. It is the default service manager in many Linux distributions. According to Qualys, the…
  • "MosaicLoader Malware Delivers Facebook Stealers, RATs"
    Researchers at Bitdefender have discovered a never-before-documented Windows malware strain dubbed MosaicLoader.  MosaicLoader is spreading indiscriminately worldwide through paid ads in search results, targeting people looking for pirated software…
  • "Cybersecurity Training Program Teaches How to Fend Off Attacks"
    IT Governance USA calls on organizations to implement cybersecurity training in the onboarding process for all new employees. This training should include examples of security incidents and the details of those who should be contacted in the event that…
  • "Facebook Suspends Accounts Used by Iranian Hackers to Target US Military Personnel"
    Facebooks takes down over 200 Iranian Hacker Accounts used to target US Military Personnel This week Facebook disabled a sophisticated online cyber espionage campaign by Iranian threat actor AKA Tortoiseshell which was targeting about 200 military…
  • "Ruthless Attackers Target Florida Condo Collapse Victims"
    It has recently been discovered that adversaries are stealing the identities of those lost in the condo-collapse tragedy.  Families mourning the loss of loved ones to the partial collapse of the Champlain Towers South condo building in Surfside,…
  • "Hackers Got Past Windows Hello by Tricking a Webcam"
    Researchers from the security firm CyberArk have discovered a potential vulnerability in Microsoft's facial recognition technology. They demonstrated a new method for deceiving Microsoft's Windows Hello facial recognition system. Windows Hello facial…
  • "CISA Issues Mitigation Tips for Common Attack Tactics"
    The U.S. Homeland Security Department's Cybersecurity and Infrastructure Security Agency (CISA) has made high-level recommendations for mitigating six stages of a sample attack pathway. The six stages identified by CISA include initial access, command…
  • "US Blames China For Microsoft Hacking, Ransomware Attacks as Part of Global Condemnation"
    On Monday, the United States and their allies blamed China for exploiting flaws in the Microsoft Exchange Server that enabled worldwide ransomware attacks on tens of thousands of victims.  It was part of a multi-front response Monday from the…