CVE-2021-27461
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs.
The Check Point Research team has recently discovered that in the last few months, mobile app developers potentially exposed the private data of over 100 million Android users, by not following best security practices when integrating third-party cloud services into their applications. The Check Point researchers analyzed 23 Android apps, including a screen recorder, a…
Israel allegedly takes responsibility for Iran cyberattack – IT Security News 12. April 2021 Iran’s main nuclear facility suffered a cyberattack on Sunday, leading to a large scale blackout at Natanz, which Israel now appears to be taking responsibility for. Tehran’s nuclear energy chief described the attack as an act of…
Recruitment & Reskilling Strategy , Security Awareness Programs & Computer-based Training , Training & Security Leadership Dr. Claudia Natanson Describes Vision of U.K.’s New Self-Regulatory Body Anna Delaney (annamadeline) • June 5, 2021 Dr. Claudia Natanson, chair, UK Cyber Security Council The U.K. Cyber Security Council is a…
Meat-packing Giant JBS USA Shuts Down Systems Following Cyberattack | IT Security News 1. June 2021 This article has been indexed from SecurityWeek RSS Feed JBS USA, the US subsidiary of the world’s largest meat processing company, said Monday that some operations were shut down following a cyberattack that affected its North American and Australian…
Critical Infrastructure Security , Cybercrime , Cybercrime as-a-service Symantec: China-Linked Actors Investigate SCADA Systems Akshaya Asokan (asokan_akshaya) • August 7, 2021 An unidentified hacking group with suspected China ties is targeting critical infrastructure in South East Asia as part of a cyberespionage campaign to exfiltrate information about the victim’s SCADA systems. says a…
Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Governance & Risk Management ESET Report Ties ‘Vyveva’ Backdoor to North Korean APT Group Akshaya Asokan (asokan_akshaya) • April 9, 2021 Example of how the “Vyveva” backdoor works (Source: ESET) The Lazarus Group, a North Korean-linked advanced persistent threat group also known as…