CVE-2021-1522

Company Called Out by Whistleblower for Attack Response Doug Olenick (DougOlenick) • April 2, 2021     Internet of things vendor Ubiquiti revealed in a security notice Wednesday that an attacker had attempted to extort money from the company following a December 2020 cyber incident – a fact not mentioned in the company’s Jan. 11…

Web infrastructure and website security company Cloudflare on Thursday disclosed that it mitigated the largest ever volumetric distributed denial of service (DDoS) attack recorded to date.The attack, launched via a Mirai botnet, is said to have targeted an unnamed customer in the financial industry last month. “Within seconds, the botnet bombarded the Cloudflare edge with…

Key Findings McAfee sees COVID-19-themed cyber-attack detections increase by 114% in Q4 2020 Powershell threats grow 208% driven by Donoff malware New malware samples grow 10%; averaging 648 new threats per minute New ransomware increases 69%; Mobile malware grows 118% McAfee observes 3.1 million external attacks on cloud user accounts The Eternal Blue exploit was…

There are more than 10 different advanced persistent threat (APT) groups exploiting recent Microsoft Exchange vulnerabilities, according to ESET research. Last week, Microsoft released out-of-band patches to fix multiple zero-day vulnerabilities believed to be being exploited by Chinese state-sponsored group Hafnium. The step was taken to protect customers running on-premises versions of Microsoft Exchange Server….

Easy to redeem and hard to trace, gift cards remain a hot commodity in the criminal underground A cybercriminal has sold almost 900,000 gift cards and over 300,000 payment cards on a top-tier cybercrime forum on the dark web. The total value of the cards was claimed to be some US$38 million. The hacker probably…

Security researchers document 21 major security vulnerabilities in Exim and warn that users are exposed to remote code execution flaws  Security researchers at Qualys have discovered multiple gaping security holes in Exim, a widely deployed mail server that has been targeted in the past by advanced nation state-based threat actors. An advisory from Qualys documents…