Information Security newsfeed from around the world in English and French. Find it all in one place… here.
Cybersecurity companies Mimecast and Qualys have apparently been targeted by the threat actor that breached the systems of IT management solutions provider SolarWinds as part of a sophisticated supply chain attack. Fidelis Cybersecurity has also confirmed being hit, but it’s unclear if it was specifically targeted. read more Source: Security Week
Continue ReadingMost companies are quick to remove ex-staff from the payroll, but often not so quick to shut down their network access. Source: Naked Security Sophos New feed
Continue ReadingThe owners of the Telegram channels noted that scammers under the guise of advertising offers send malicious files. ” In particular, they can be represented by advertising managers of the GeekBrains educational platform”, Nikita Mogutin, the co-founder of the Telegram channel Baza (more than 310,000 subscribers), wrote on Facebook. Owner of the Telegram channel Madonna […]
Continue ReadingA newly devised variant of the NAT Slipstreaming attack can be leveraged to compromise any device on the local network, according to researchers at enterprise IoT security firm Armis. read more Source: Security Week
Continue ReadingHackers masquerade as security researchers to befriend analysts and eventually infect fully patched systems at multiple firms with a malicious backdoor. Source: Threatpost.com
Continue ReadingGoogle says it’s making progress on plans to revamp Chrome user tracking technology aimed at improving privacy even as it faces challenges from regulators and officials. read more Source: Security Week
Continue ReadingSeveral companies that provide services for mitigating distributed denial-of-service (DDoS) attacks reported seeing records being broken in 2020. read more Source: Security Week
Continue Reading
Security firm Radware uncovered the threat actors’ campaign named ‘distributed denial-of-service’ (DDoS). This campaign was launched to target the same set of victims from September 2020 after the companies failed to pay the initial ransom between five and ten bitcoins ($160,000 and $320,000) as demanded by the threat actors. According to the reports, an […]
Continue ReadingAn ongoing campaign powered by a phishing kit sold on underground forums is explicitly targeting high-ranking executives in a variety of sectors and countries with fake Office 365 password expiration notifications, Trend Micro researchers warn. The compromised login credentials are likely then sold on those same forums for $250 per account (or even higher). The […]
Continue ReadingThe Australian Securities and Investments Commission (ASIC) on Monday disclosed a security incident that involved Accellion software. read more Source: Security Week
Continue Reading