Trump vows defense bill veto unless internet liability shield scrapped
U.S. President Donald Trump said on Tuesday he would veto the $740 billion National Defense Authorization Act unless it includes a measure eliminating a federal law protecting tech companies...
Xerox DocuShare Bugs Allows Data Leaks
CISA warns the leading enterprise document management platform is open to attack and urges companies to apply fixes.
Xerox issued a fix for two vulnerabilities impacting its market-leading DocuShare enterprise...
Turla’s ‘Crutch’ Backdoor Leverages Dropbox in Espionage Attacks
In a recent cyberattack against an E.U. country’s Ministry of Foreign Affairs, the Crutch backdoor leveraged Dropbox to exfiltrate sensitive documents.
Researchers have discovered a previously undocumented backdoor and document...
Think-Tanks Under Attack by Foreign APTs, CISA Warns
The feds have seen ongoing cyberattacks on think-tanks (bent on espionage, malware delivery and more), using phishing and VPN exploits as primary attack vectors.
The Cybersecurity and Infrastructure Security Agency...
Experts Uncover ‘Crutch’ Russian Malware Used in APT Attacks for 5 Years
By: Ravie Lakshmanan
Cybersecurity researchers today took the wraps off a previously undocumented backdoor and document stealer that has been deployed against specific targets from 2015 to early 2020.
Codenamed "Crutch"...
8.5+ million user records from royalty-free image website leaked on Russian hacker forum
123RF.com is “actively notifying the necessary authorities and 123RF.com members to work with them to remedy the situation” and “tightening the security policies to include tighter passwords and IP...
Using Speakeasy Emulation Framework Programmatically to Unpack Malware
Andrew Davis recently announced the public release of his new Windows emulation framework named Speakeasy. While the introductory blog post focused on using Speakeasy as an automated malware sandbox...
