Businesses Struggle with Cloud Availability as Attackers Take Aim
Researchers find organizations struggle with availability for cloud applications as government officials warn of cloud-focused cyberattacks.The majority of organizations have separate tools for networking and security, researchers report in...
‘Chimera’ Threat Group Abuses Microsoft & Google Cloud Services
Researchers detail a new threat group targeting cloud services to achieve goals aligning with Chinese interests.Security researchers are watching a threat group that takes advantage of Microsoft and Google...
Huntress Acquires EDR Technology From Level Effect
Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database
CVE-2021-1245PUBLISHED: 2021-01-13
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack...
SolarWinds Attackers May Have Hit Mimecast, Driving New Concerns
Mimecast no longer uses the SolarWinds Orion network management software that served as an attack vector for thousands of organizations.The discovery of a data breach at email service provider...
United Nations Security Flaw Exposed 100K Staff Records
Security researchers have disclosed a vulnerability they exploited to access more than 100,000 private employee records.Security researchers have disclosed a vulnerability they exploited to access at least 100,000 private...
More SolarWinds Attack Details Emerge
A third piece of malware is uncovered, but there's still plenty of unknowns about the epic attacks purportedly out of Russia.As yet another piece of malware has been uncovered...
New Tool Sheds Light on AppleScript-Obfuscated Malware
The AEVT decompiler helped researchers analyze a cryptominer campaign that used AppleScript for obfuscation and will help reverse engineers focused on other Mac OS malware.An effort to reverse-engineer malicious...
Intel’s New vPro Processors Aim to Help Defend Against Ransomware
The newest Intel Core vPro mobile platform gives PC hardware a direct role in detecting ransomware attacks.Intel is bringing ransomware protection to its new 11th Gen Core vPro mobile...
SolarWinds Hires Chris Krebs and Alex Stamos for Breach Recovery
The former US cybersecurity official and former Facebook security chief will help SolarWinds respond to its recent attack and improve security.SolarWinds, the company targeted in a major cyberattack affecting...
Malware Developers Refresh Their Attack Tools
Cisco analyzes the latest version of the LokiBot malware for stealing credentials, finding that its developers have added more misdirection and anti-analysis features.The developers of attack tools continue to...
