News
-
"Are Your Devices Spying on You? Australia's Very Small Step to Make the Internet of Things Safer"The growing number and use of Internet of Things (IoT) devices increase users' vulnerability to attacks as these devices commonly contain security flaws. Hackers could abuse these vulnerabilities to perform malicious activities such as hijacking devices… -
"Security Solution Traps Cybercriminals in a Virtual Network"Researchers at the University of Strathclyde's Center for Intelligent and Dynamic Communications are developing a new cybersecurity deception solution. Their solution, called "Lupovis," applies Artificial Intelligence (AI) to lure attackers away from…
-
"Are Your Domain Controllers Safe From Zerologon Attacks?"Several proof-of-concept (POC) exploits were released for "Zerologon," a critical elevation of privilege vulnerability found in Microsoft's Netlogon Remote Protocol. The vulnerability, discovered by Secura researchers, impacts all supported Windows…
-
"MFA Bypass Bugs Opened Microsoft 365 to Attack"Researchers have found bugs in the multi-factor authentication system used by Microsoft's cloud-based office productivity platform, Microsoft 365. The flaws exist in the implementation of what is called the WS-Trust specification in cloud…
-
"FBI Says Credential Stuffing Attacks Are Behind Some Recent Bank Hacks"The FBI recently issued a private security alert to the US financial sector warning organizations of the rise in credential stuffing attacks against their networks as well as an increase in breaches and significant financial losses resulting from such…
-
"University Project Tracks Ransomware Attacks on Critical Infrastructure"A team of researchers at Temple University in Philadelphia has been tracking ransomware attacks on critical infrastructure. The collection of data on these attacks can be requested by anyone, including educators, grad students, government representatives…
-
"Virginia's Largest School System Hit With Ransomware"Fairfax County Public Schools (FCPS), Virginia's largest school system, recently faced a ransomware attack on its technology systems. The Maze hacking group claimed to have been behind the attack. This ransomware attack disrupted distance learning for…
-
"Telehealth is Healthcare Industry’s Biggest Cybersecurity Risk"Due to the coronavirus, the number of telehealth primary care visits has increased exponentially. In a new study, researchers reviewed the 148 most-used telehealth vendors. The researchers found that telehealth providers have experienced a…
-
"Razer Gaming Fans Caught Up in Data Leak"A security consultant discovered a misconfigured Elasticsearch cloud cluster that exposed a segment of Razer's infrastructure to the public internet, where anyone could access the information. Razer is a company that sells gaming gear. It is…
-
"Ransomware Accounted for 41% of All Cyber Insurance Claims in H1 2020"A report recently published by Coalition, one of the leading providers of cyber insurance and security, revealed that ransomware incidents made up 41% of cyber insurance claims filed in the first half of 2020. The high number of claims confirms…
-
"Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks"Researchers at Purdue University have discovered a flaw they are calling "BLURtooth." The high-severity Bluetooth vulnerability exists in the pairing process for Bluetooth 4.0 through 5.0 implementations. The vulnerability could allow an unauthenticated…
-
"Hackers Use Cloud Monitoring Tool to Install Cryptominers"Reports from Microsoft and Intezer reveal the weaponization of a legitimate cloud monitoring tool, called Weave Scope, to install cryptominers in cloud environments. TeamTNT is the hacking group discovered to be using the tool to perform this malicious…