CVE-2021-1522

Former Florida tax official and Matt Gaetz associate Joel Greenberg pleaded guilty to 6 counts on Monday. He appeared before a judge and pleaded guilty to sex-trafficking, wire fraud, identity theft, stalking, and conspiracy. Greenberg also agreed to cooperate fully with the government in any related cases. See more stories on Insider’s business page. The…

Today, the UK government has announced a call for advice on defending against software supply-chain attacks and ways to strengthen IT Managed Service Providers (MSPs) across the country. The move comes after last week when President Biden had issued an executive order to increase cybersecurity defenses across the U.S. The government’s invitation to provide feedback that will be open for…

Forensics , Fraud Management & Cybercrime , Fraud Risk Management Proofpoint Update Describes the Fraud Tactics Prajeet Nair (@prajeetspeaks) • March 23, 2021     The SolarWinds supply chain attackers manipulated OAuth app certificates to maintain persistence and access privileged resources including email, according to researchers at Proofpoint. See Also: Top 50 Security Threats …

Blockchain & Cryptocurrency , Critical Infrastructure Security , Cryptocurrency Fraud If Ransomware Should Decline as a Viable Criminal Business Model, What Comes Next? Mathew J. Schwartz (euroinfosec) • July 16, 2021     Source: Cisco Talos The world is now focused on ransomware, perhaps more so than any previous cybersecurity threat in history. But if…

Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime , Governance & Risk Management Software Vendor Said Approximately 60 MSPs and 1,500 Clients Affected by Attack Doug Olenick (DougOlenick) • July 22, 2021     Kaseya Executive Vice President Mike Sanders (Source: Kaseya) Three weeks after its software was used to facilitate a…

Zerodium Will Triple Payouts for RCE Exploits for WordPress CMS – IT Security News 12. April 2021 Zerodium is an American security company, whose main business is to develop and acquire premium zero-day exploits from security researchers and report the research, along with protective measures and security recommendations, to its government…