Another zero-day vulnerability in SolarWinds Serv-U product exploited by cyber criminals

The hackers were using malware campaigns to target iOS and Android devices used by Uyghurs living outside China including journalists. Facebook has removed accounts of hackers possibly backed by the Chinese government for targeting Uyghur community members living abroad. According to Facebook’s Head of Cyber Espionage Investigations, Mike Dvilyanski, and Head of Security Policy, Nathaniel…

3rd Party Risk Management , Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime Newly Appointed Director Describes Effort to Build National Cybersecurity Defense Strategy Scott Ferguson (Ferguson_Writes) • August 5, 2021     CISA Director Jen Easterly makes a virtual presentation at Black Hat 2021. The U.S. Cybersecurity and Infrastructure Security Agency…

Governance & Risk Management , IT Risk Management , Patch Management The Flaw in Windows Graphics Component Can Enable Web-Based Attacks Akshaya Asokan (asokan_akshaya) • February 26, 2021     Microsoft has patched a critical vulnerability in Windows that can be exploited by tricking users to visit websites that use a malicious font. The flaw…

A monster cyberattack on SITA, a global IT provider for 90 percent of the world’s airline industry, is slowly unfurling to reveal the largest supply-chain attack on the airline industry in history. The enormous data breach, estimated to have already impacted 4.

Brandon Rochat, Sales Director: Africa, Cybereason. Ransomware is one of the biggest cyber security threats globally. It is estimated that there is a ransomware attack on a business every 11 seconds on average, with global ransomware damage losses projected to reach $20 billion this year. According to PurpleSec’s 2021 Cyber Security Trends report, cyber crime…

The Department of Justice (DOJ) said Friday that the hackers behind the major SolarWinds attack compromised employee accounts in more than two dozen federal prosecutors’ offices. The DOJ said in an update that the hackers are believed to have compromised the accounts from May 7 to Dec. 27, 2020. The data includes “all sent, received, and stored…