Another zero-day vulnerability in SolarWinds Serv-U product exploited by cyber criminals

Stanford University’s Internet Observatory reported the incident first, but the programme’s chief technology officer David Thiel stressed that the data spill was not malicious or a “hack”. Instead, he said it was more that a user had decided to violate Clubhouse’s terms of service.

The Hades ransomware gang has several unique characteristics that set it apart from the rest of the pack, according to researchers – including potentially having more than extortion on the to-do list. The group appears to use multiple nation-state tools and techniques.

Ireland’s data protection authority has launched an inquiry into Facebook over a breach of personal data. The personal details of more than 530 million Facebook users were found available on a website for hackers last week. According to the cybercrime intelligence firm Hudson Rock, as many as 533 million Facebook accounts had their phone numbers,…

Suspected Russian hackers gained access to email accounts belonging to the Trump administration’s head of the Department of Homeland Security and members of the department’s cybersecurity staff whose jobs included hunting threats from foreign countries, The Associated Press has learned. The intelligence value of the hacking of then-acting Secretary Chad Wolf and his staff is…

A hacking group believed to be responsible for the SolarWinds breaches used access to Microsoft’s support tools via a compromised customer service agent’s computer, a breach that enabled the hackers to perform further hacks against Microsoft’s customers. Disclosed on Friday via a blog post, Microsoft confirmed its investigation into the Nobelium hacking group found “information-stealing…

By Raphael Satter, Christopher Bing WASHINGTON (Reuters) – A China-linked cyber-espionage group has been remotely plundering email inboxes using freshly discovered flaws in Microsoft mail server software, the company and outside researchers said on Tuesday – an example of how commonly used programs can be exploited to cast a wide net online. In a blog…