Authorities Arrest Another TrickBot Gang Member in South Korea

Endpoint Security , Governance & Risk Management , Patch Management Dell Has Patched Driver Issue Found by SentinelOne Jeremy Kirk (jeremy_kirk) • May 5, 2021     Dell’s headquarters in Round Rock, Texas (Photo: Jjpwiki via Wikipedia/CC) Dell has patched five flaws in a vulnerable firmware update driver that has shipped in millions of laptops,…

A Chinese national flag flutters outside the China Securities Regulatory Commission (CSRC) building on the Financial Street in Beijing, China July 9, 2021. REUTERS/Tingshu Wang BEIJING, Aug 1 (Reuters) – China’s securities regulator said on Sunday it will seek closer cooperation with its U.S. counterpart and will support overseas listings, after U.S. regulators tightened disclosure…

Attackers are looking to exploit critical VMware vCenter Server RCE flaw, patch ASAP! | IT Security News 25. February 2021 The day after VMware released fixes for a critical RCE flaw (CVE-2021-21972) found in a default vCenter Server plugin, opportunistic attackers began searching for publicly accessible vulnerable systems. We’ve detected mass scanning activity targeting vulnerable…

Microsoft has provided mitigation guidance to block attacks on systems vulnerable to exploits targeting the Windows Print Spooler zero-day vulnerability known as PrintNightmare. This remote code execution (RCE) bug—now tracked as CVE-2021-34527—impacts all versions of Windows per Microsoft, with the company still investigating if the vulnerability is exploitable on all of them. CVE-2021-34527 allows attackers to take over affected…

Application Security & Online Fraud , Cybercrime , Fraud Management & Cybercrime NY Officials: Fraudsters Continue to Probe Sites for Security Weaknesses Prajeet Nair (@prajeetspeaks) • April 2, 2021     New York state officials are warning CISOs and other executives in the banking and insurance industries that fraudsters continue to probe for security weaknesses…

Cyberwarfare / Nation-State Attacks , Forensics , Fraud Management & Cybercrime Issues Include Attackers’ Use of Amazon’s Infrastructure Scott Ferguson (Ferguson_Writes) • February 24, 2021     (Source: Jarek Tuszyński via Wikipedia) The Senate Intelligence Committee’s hearing Tuesday about the supply chain attack that affected SolarWinds and dozens of other companies and federal agencies answered…