Security

OODA Loop – New Cybersecurity Programs to Protect US Energy

ByPR 24 March 24, 2021

The United States is launching three new research programs designed to protect America’s critical energy infrastructure systems. The Department of Energy released information on the projects earlier this week, which will be spearheaded by the department’s Office of Cybersecurity, Energy Security, and Emergency Response. The programs will aim to protect the US energy system from increasing cyber threats and physical hazards, according to the announcement.

The Department of Energy states that the programs will explore ways to protect infrastructure against geomagnetic and electromagnetic interference. The programs will also implement new research and talent pipelines to usher in the next generation of cybersecurity professionals. The departments hope that facing the threats head-on through using a proactive approach will mitigate the risks posed by cyberattacks, wildfires, climate change, and extreme weather.

Security

Microsoft Exchange servers now targeted by Black Kingdom ransomware

ByPR 24 March 23, 2021

Another ransomware operation known as ‘Black Kingdom’ is exploiting the Microsoft Exchange Server ProxyLogon vulnerabilities to encrypt servers. Over the weekend, security researcher Marcus Hutchins, aka MalwareTechBlog, tweeted that a threat actor was compromising Microsoft Exchange servers via the ProxyLogon vulnerabilities to deploy ransomware. Based on the logs from his honeypots, Hutchins states that the threat actor…

Security

Remote Code Execution Vulnerability Affects Millions of Dell Devices

ByPR 24 June 24, 2021

Eclypsium has discovered a number of vulnerabilities, the combined exploitation of which allows remote code execution on Dell computers. The vulnerabilities affect the BIOSConnect feature of intelligent technology to maximize the performance of SupportAssist computers. The vulnerability chain scored 8.3 out of a maximum 10 on the CVSS severity scale. The cumulative exploitation of the…

Security

Gigaset Android phones infected by malware via hacked update server

ByPR 24 April 9, 2021

Owners of Gigaset Android phones have been repeatedly infected with malware since the end of March after threat actors compromised the vendor’s update server in a supply-chain attack. Gigaset is a German manufacturer of telecommunications devices, including a series of smartphones running the Android operating system. Starting around March 27th, users suddenly found their Gigaset…

Security

NSA Veterans Nominated for Top Cyber Posts

ByPR 24 April 12, 2021

Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management Chris Inglis Nominated for Cyber Director; Jen Easterly Tapped to Lead CISA Scott Ferguson (Ferguson_Writes) • April 12, 2021 The White House has nominated John “Chris” Inglis to become the nation’s first national cyber director and Jen Easterly to lead…

Security

Relief Package Includes Less for Cybersecurity

ByPR 24 March 12, 2021

Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management $2 Billion for Security and IT, Rather Than $10 Billion as Originally Proposed Scott Ferguson (Ferguson_Writes) • March 11, 2021 President Joe Biden in the Oval Office (Source: Wikipedia) The $1.9 trillion economic relief package known as the American Rescue…

Security

CVE-2021-22354 – Alert Detail – Security Database

ByPR 24 July 1, 2021

Executive Summary Informations Name CVE-2021-22354 First vendor Publication 2021-06-30 Vendor Cve Last vendor Modification 2021-06-30 Security-Database Scoring CVSS v3 Cvss vector : N/A Overall CVSS Score NA Base Score NA Environmental Score NA impact SubScore NA Temporal Score NA Exploitabality Sub Score NA Calculate full CVSS 3.0 Vectors scores Security-Database Scoring CVSS v2 Cvss…

Similar Posts