North Korea Targets Security Researchers in Elaborate 0-Day Campaign
Hackers masquerade as security researchers to befriend analysts and eventually infect fully patched systems at multiple firms with a malicious backdoor.
Read More
Hacks
Breaking Down Joe Biden’s $10B Cybersecurity ‘Down Payment’
Tom Kellermann, head of cybersecurity strategy for VMware Carbon Black, talks about the top security challenges facing the US government as a new presidential administration steps in.
Read More2.28M MeetMindful Daters Compromised in Data Breach
The ShinyHunters hacking group offer a raft of information, from location and contact info to dating preferences and bodily descriptions, as a free download.
Read MoreADT Tech Hacks Home-Security Cameras to Spy on Women
A former ADT employee pleads guilty of accessing customers’ cameras so he could spy on them.
Read MoreThreat Actors Can Exploit Windows RDP Servers to Amplify DDoS Attacks
Netscout researchers identify more than 14,000 existing servers that can be abused by ‘the general attack population’ to flood organizations’ networks with traffic.
Read MoreEinstein Healthcare Network Announces August Breach
Einstein is in violation of the the HHS 60-day breach notification rule, but unlikely to face penalty.
Read MoreSQL Server Malware Tied to Iranian Software Firm, Researchers Allege
Researchers have traced the origins of a campaign – infecting SQL servers to mine cryptocurrency – back to an Iranian software firm.
Read MoreGoogle Forms Set Baseline For Widespread BEC Attacks
Researchers warn that attackers are collecting reconnaissance for future business email compromise attacks using Google Forms.
Read MoreGoogle Searches Expose Stolen Corporate Credentials
A phishing campaign spoofs Xerox notifications to lure victims into clicking on malicious HTML attachments.
Read MoreMalwarebytes Hit by SolarWinds Attackers
The attack vector was not the Orion platform but rather an email-protection application for Microsoft 365.
Read More