Products from Symantec-owned Blue Coat and likely other vendors can cause serious problems for devices running the Chrome web browser or Chrome OS due to poor implementation of the TLS 1.3 protocol.
read more
“Gamaredon” Group Uses Custom Malware in Ukraine Attacks
A Russia-linked threat group tracked as “Gamaredon” has been using custom-developed malware in attacks aimed at Ukraine, Palo Alto Networks reported on Monday.
read more
Insecure CloudPets Database Exposed Credentials, Private Data
A public-facing, insecure CloudPets MongoDB database was found to have leaked the login credentials of over 800,000 users, researchers warn.
read more
Flaw in ESET Antivirus for Mac Allowed Code Execution
Google researchers discovered a critical flaw in ESET Endpoint Antivirus for macOS that could have been exploited by an unauthenticated attacker to remotely execute arbitrary code with root privileges. ESET has released an update that addresses the vulnerability.
read more
Adwind RAT Campaign Hits Organizations Worldwide: Kaspersky
A recently observed massive campaign using the Adwind Remote Access Tool (RAT) has hit over 1,500 organizations in over 100 countries and territories, a recent report from Kaspersky Lab warns.
read more
Windows 10 Option to Block Installation of Win32 Apps
Windows 10 could soon allow users to block the installation of applications coming from other sources than the Microsoft Store, a feature that would likely help prevent the installation of malware.
read more
Multiple Groups Cooperated in Shamoon Attacks: Symantec
The recent attacks involving the notorious disk-wiping malware Shamoon, aka Disttrack, may have been carried out by multiple groups working together under the command of a single entity, Symantec said on Monday.
read more
New Unlock26 Ransomware and RaaS Portal Discovered
A recently discovered Ransomware-as-a-Service (RaaS) portal was found to be responsible for the distribution of a brand new ransomware family dubbed Unlock26.
read more
Google Hands Over Email Encryption App to Community
Google announced last week that it has decided to hand over its E2EMail email encryption app to the community.
read more
It Takes a Village to Manage Cyber Risk
Regulators from the New York State Department of Financial Services should be applauded for their update to their upcoming cyber security regulation (if you are not in NYS or financial services, stay tuned, something similar is certainly coming to your state and industry soon).
read more
