Cyber NIST issues draft election security framework By Justin Katz Mar 31, 2021 To help local election officials prepare for and respond to cyber threats, the National Institute of Standards and Technology has published a draft framework that takes NIST’s pre-existing cybersecurity best practices and applies them to the voting equipment and information systems…
In yet another instance of a software supply chain attack, someone hacked the official Git server of the PHP programming language and pushed unauthorized updates to insert a secret backdoor into its source code.The two malicious commits were pushed to the self-hosted “php-src” repository hosted on the git.php.net server, illicitly using the names of Rasmus…
Application Security , Governance & Risk Management , IT Risk Management Experts Note Patching Alone Will Not Mitigate Threats Akshaya Asokan (asokan_akshaya) • March 31, 2021 Although SolarWinds has released a second round of patches for flaws in its Orion network monitoring platform that was targeted in a supply chain attack, some security…
Cyberwarfare / Nation-State Attacks , Endpoint Security , Fraud Management & Cybercrime Agency Describes How to Apply Its Cybersecurity Framework Scott Ferguson (Ferguson_Writes) • March 30, 2021 The National Institute of Standards and Technology has drafted guidelines for how to use its cybersecurity framework to address cyberthreats and other security issues that can…
Indian payment services provider MobiKwik continues to deny reports of a massive security breach impacting millions of customers, despite multiple independent cybersecurity researchers claiming otherwise. Earlier this month, the company took to Twitter to accuse “a media-crazed so-called security researcher” of falsely reporting it had been subject to a security breach. MobiKwik claimed at the…
Cybersecurity researchers on Tuesday disclosed details of a sophisticated campaign that deploys malicious backdoors for the purpose of exfiltrating information from a number of industry sectors located in Japan.Dubbed “A41APT” by Kaspersky researchers, the findings delve into a new slew of attacks undertaken by APT10 (aka Stone Panda or Cicada) using previously undocumented malware to deliver
A petition in Australia is calling for consent education to be included in the curriculum after thousands of young women shared stories about sexual abuse and violence during their school years. Chanel Contos, who launched the petition told BBC World News: “I started this petition because it became so clear to me in my adult…
The recently patched vulnerabilities in Microsoft Exchange have sparked new interest among cybercriminals, who increased the volume of attacks focusing on this particular vector. While ransomware attacks have increased in frequency in the past six months, cybersecurity company Check Point last week noticed a surge in incidents targeting Microsoft Exchange servers vulnerable to the so-called…
BBC China correspondent John Sudworth has left Beijing and moved to Taiwan after pressure and threats from the Chinese authorities. Even as we were leaving we were followed by plain clothes policeman through the departure hall of the airport, he told BBC World News. It was a reminder of the “grim reality of reporting in…
The passing of sweeping changes to Hong Kong’s electoral rules will mean prospective MPs will have to go through a degrading and humiliating process, the former Democratic Party chairperson and legislator Emily Lau has said. Hong Kong does not have democracy but they had a system which allowed people to be free, safe and have…
