Governance & Risk Management , IT Risk Management , Patch Management If Exploited, Flaws Could Open Door to Theft of Admin Credentials Prajeet Nair (@prajeetspeaks) • April 1, 2021 VMware has issued patches for two critical vulnerabilities in its IT operations management platform, vRealize Operations, which, if exploited, could allow attackers to steal…
CISA, the US Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, has told federal agencies that they have until 12:00pm EDT on Monday April 5 to scan their networks for evidence of intrusion by malicious actors, and report back the results. CISA is ordering agencies with on-premises Microsoft Exchange servers to urgently conduct the…
Thousands of people from the Karen, or Kayin, state of Myanmar have fled to Thailand in recent days following airstrikes by Myanmar’s military. But those that have crossed into Thailand are now being told to go home, a spokesperson for the Karen Peace Support Network said. The spokesperson, whose identity is being concealed for security…
A North Korean government-backed campaign targeting cybersecurity researchers with malware has re-emerged with new tactics in their arsenal as part of a fresh social engineering attack. In an update shared on Wednesday, Google’s Threat Analysis Group said the attackers behind the operation set up a fake security company called SecuriElite and a slew of social…
The rollout of coronavirus vaccines in Europe is “unacceptably slow” the World Health Organization’s director for Europe Dr Hans Kluge has said in a statement. Speaking to BBC World News he said: “Four months ago the WHO approved the first vaccines which means the de facto Covid-19 has become a vaccine preventable disease.” Delaying the…
The sentencing of seven of Hong Kong’s most prominent pro-democracy campaigners for unlawful assembly will send a message not just to Hong Kong, but to Beijing and the rest of the world about whether there is still an independent judiciary, the former Democratic Party chairperson and legislator Emily Lau has said. “We would like to…
Alexander Matheou, the Asia Pacific director of the International Federation of Red Cross and Red Crescent Societies says aid workers are facing intimidation and attacks in Myanmar, also known as Burma. He told BBC World News that more than 30 incidents on health workers had been recorded although most of the Myanmar Red Cross activity…
An unknown malicious actor has compromised the official PHP Git repository in attempt to add backdoors to the code base of the PHP project. According to PHP programming language developer and maintainer Nikita Popov, the incident took place last Saturday, on March 28. He said that two malicious commits were pushed to the…
MobiKwik CEO Bipin Preet Singh on Tuesday said the company is investigating claims of some users that their data was available on the dark web. He said the company would get a third party to conduct a forensic data security audit. Responding to reports of a massive data breach in MobiKwik’s servers, Singh came…
#LORCALive: Nation State Cooperation Essential to Fighting Scourge of Cybercrime | IT Security News Sponsors Endpoint Cybersecurity www.endpoint-cybersecurity.com – Consulting in building your security products– Employee awareness training– Security tests for applications and pentesting… and more. Daily Summary Categories CategoriesSelect Category(ISC)2 Blog (323)(ISC)2 Blog infosec (13)(ISC)² Blog (333)2020-12-08 – Files for an ISC diary (recent Qakbot activity) (1)2020-12-11 –…
