News
  • "House Passes Batch of Cyber-Related Energy Bills"
    The U.S. House of Representatives has approved a collection of bills to improve cybersecurity for the energy sector. These bills also address the use of emerging technologies and the establishment of R&D plans. The Grid Security Research and…
  • "Phishing Attack Targets Microsoft 365 Users With Netflix & Amazon Lures"
    Proofpoint researchers have observed a phishing campaign abusing Microsoft Office 365 third-party application access. The campaign aims to gain access to victims' contacts, profiles, and more. The attacker, called TA2552, primarily targets Spanish-…
  • "A New Ransomware Gang Is Aiming at Big Russian Targets, Researchers Say"
    According to researchers at the security vendor Group-IB, a new ransomware gang is targeting medical labs, banks, manufacturers, and software developers in Russia through the use of custom tools. The ransomware group, dubbed OldGremlin, conducts spear…
  • "IST Researchers Exploit Vulnerabilities of AI-Powered Game Bots"
    When you play an online video game, you are likely to compete with bots, which are AI-driven programs that play the game in place of a human. Many of these bots are developed using deep reinforcement learning in which algorithms are trained to learn how…
  • "Las Vegas Students’ Personal Data Leaked, Post-Ransomware Attack"
    In early September, Clark County School District, which includes Las Vegas, was hit with a ransomware attack by adversaries from the Maze gang.  The school did not pay the ransom to have their systems unlocked.  Recently researchers at Emsisoft…
  • "4.83 Million DDoS Attacks Took Place in The First Half of 2020, a 15% Increase"
    Researchers at Netscout witnessed a radical change in DDoS attack methodology in the first half of 2020.   DDoS attack methodology shifted to shorter, faster, hard-hitting, complex multi-vector attacks.  The researchers discovered that 4.83…
  • "Joker Trojans Flood the Android Ecosystem"
    Researchers at Zcaler in September saw dozens of Joker malware variants hitting Google Play and third-party app stores. They found 17 different samples of Joker being regularly uploaded to Google Play. Collectively the applications carrying the Joker…
  • "Breach at Software Provider to Local Governments, Schools"
    Tyler Technologies is a major provider of software services for governments and schools across the US that has recently revealed that an unknown intruder compromised its phone and information systems. Tyler provides service for court management systems,…
  • "3D Biometric Authentication Based on Finger Veins Almost Impossible to Fool"
    Biometric authentication methods rely on unique biological characteristics for identity verification. These methods are continuing to replace traditional passwords. A team of researchers developed a new biometric authentication method that is based on 3D…
  • "Multiple Wireless Router Chipsets Affected by Authentication Bypass Vulnerability"
    Synopsys CyRC published an advisory detailing an authentication bypass vulnerability contained by various wireless router chipsets. This vulnerability impacts chipsets in different devices manufactured by Mediatek, Qualcomm, and Realtek. The exploitation…
  • "Universal Health Services Ransomware Attack Impacts Hospitals Nationwide"
    In the early hours of Monday morning, Universal Health Services (UHS), a Fortune-500 owner of a nationwide network of hospitals, was hit with a ransomware attack.  UHS has not mentioned the kind of attack it has suffered, but information from…
  • SoS Musings #41 - 5G Security: Are We Ready?
    SoS Musings #41 - 5G Security: Are We Ready?