News
-
"BEC Attack on Monongalia Health System"A three-hospital health system in West Virginia has become the victim of a business email compromise (BEC) scam that began with a phishing attack. Monongalia Health System, Inc. (MHS) had no idea that its cybersecurity defenses had been penetrated… -
"CISA, Cybersecurity Centers From Australia, NZ, UK, and Canada Release Log4j Advisory"Cybersecurity leaders from the US, Australia, Canada, New Zealand, and the UK have issued a new Log4j advisory. The guide covers technical details, mitigations, and resources for addressing vulnerabilities in the Apache Log4j software library. This is a…
-
"Attackers Bypass Microsoft Patch to Deliver Formbook Malware"Researchers from Sophos Labs have discovered the use of a novel exploit that can bypass a patch for a critical vulnerability impacting the Microsoft Office file format. Attackers weaponized a publicly available proof-of-concept Office exploit to deliver…
-
"Solving the Challenges of Shifting Security Left"During the "Shift Left and Extend Right" trend, developers are finding that they need to implement stronger security practices into their processes. Idan Plotnik, the co-founder and CEO of Apiiro, an application risk management platform provider, has…
-
"Ransomware Threat Just as Urgent as Terrorism, Say Two-Thirds of IT Pros"Researchers from Venafi have found that nearly two-thirds (60%) of security professionals believe the threat of ransomware should be treated with the same urgency as terrorism. The survey of 1500 IT security decision-makers from the UK, US,…
-
"Ubisoft Reveals Player Data Breach Came from User Error"Ubisoft has admitted that data on some players may have been taken after a breach of its IT systems stemming from human error. The French gaming giant stated that the misconfiguration of its IT infrastructure was quickly identified, but not before…
-
"Attackers May Influence Security Equipment by Exploiting Flaws in Metal Detector Peripherals"Security researchers with Cisco Talos recently discovered multiple vulnerabilities in a device from Garrett Metal Detectors that could be exploited to allow remote attackers to evade authentication requirements, alter metal detector setups, and execute…
-
"F-Secure Uses Flaw in At-Home COVID-19 Test To Fake Results"Security researchers at F-Secure identified a vulnerability in a home test for COVID-19. The exploitation of this flaw could allow a malicious actor to alter test results, changing them from positive to negative or vice versa. According to the…
-
"Escalation in Healthcare Data Breaches"The number of healthcare data breaches reported in the United States has increased for the third month in a row. Records kept by the Department of Health and Human Services' Office for Civil Rights (OCR) indicate that the total number of reported…
-
"Ransomware Attackers Have 'Industry Standards' Too"The actors behind ransomware attacks are creating industry standards to define ideal targets for their malicious campaigns. In July 2021, researchers with the threat intelligence company KELA found 48 discussion threads on dark web marketplaces in which…
-
"Hackers Can Penetrate 93% of Local Networks"Researchers at Positive Technologies have found that cyberattackers can breach 93% of organizations’ network perimeters and gain access to their resources. The study showed results from the company’s penetration testing projects in the second half…
-
"Security Flaws Found in a Popular Guest Wi-Fi System Used in Hundreds of Hotels"A security researcher named Etizaz Mohsin discovered that the Airangel HSMX Gateway, used by hundreds of hotels to provide and manage guest Wi-Fi networks, contains security flaws, putting hotel guests' personal information at risk. According to Mohsin,…