A cyberattack shutdown US Colonial Pipeline

Cybercrime , Fraud Management & Cybercrime , Social Engineering Microsoft Says Spam Campaign Uses Updated Variant Prajeet Nair (@prajeetspeaks) • May 24, 2021     If the “Outgoing Payments” PDF is clicked, it downloads the StrRAT. (Source: Microsoft) Microsoft is warning about a spam campaign that uses an updated variant of Java-based StrRAT malware that…

3rd Party Risk Management , Blockchain & Cryptocurrency , Governance & Risk Management Risk Assessment, Improving DevSecOps, Cryptocurrency Risk Research Drive Deals Doug Olenick (DougOlenick) • September 14, 2021     Merger and acquisition activity picked up again in September with BitSight, Tenable and Mastercard all making deals. See Also: An All-in-One Vulnerability Management, Detection,…

Fraud Management & Cybercrime , Governance & Risk Management , Patch Management Pondurance: Ransomware Group Used Backdoors That Persist Prajeet Nair (@prajeetspeaks) • August 10, 2021     Some patched on-premises Microsoft Exchange email servers are still proving to be vulnerable. The Conti ransomware group is now leveraging backdoors that persist, cybersecurity consulting firm Pondurance…

As cybersecurity researchers continue to piece together the sprawling SolarWinds supply chain attack, top executives of the Texas-based software services firm blamed an intern for a critical password lapse that went unnoticed for several years. The said password “solarwinds123” was originally believed to have been publicly accessible via a GitHub repository since June 17, 2018,…

The maintainers of Jenkins—a popular open-source automation server software—have disclosed a security breach after unidentified threat actors gained access to one of their servers by exploiting a recently disclosed vulnerability in Atlassian Confluence service to install a cryptocurrency miner. The “successful attack,” which is believed to have occurred last week, was mounted against its Confluence…

Indonesian authorities have found no evidence that the country’s main intelligence service’s computers were compromised after a US-based private cybersecurity company alerted them of a suspected breach of its internal networks by a Chinese hacking group, an official said. The Insikt Group, the threat research division of Massachusetts-based Recorded Future, said it discovered the…