Chinese Hackers Targeted Serum Institute, Bharat Biotech, Claims Cyber Firm Report

Chinese Hackers Targeted Serum Institute, Bharat Biotech, Claims Cyber Firm Report

New Delhi: A hacking group backed by China has in recent weeks targeted the IT systems of two Indian vaccine makers whose coronavirus shots are being used in the country’s immunisation drive, reported news agency Reuters quoting cyber intelligence firm Cyfirma. China and India have both sold or gifted COVID-19 shots to many countries under…

Extortion Gang Breaches Cybersecurity Firm Qualys Using Accellion Exploit

Extortion Gang Breaches Cybersecurity Firm Qualys Using Accellion Exploit

Enterprise cloud security firm Qualys has become the latest victim to join a long list of entities to have suffered a data breach after zero-day vulnerabilities in its Accellion File Transfer Appliance (FTA) server were exploited to steal sensitive business documents. As proof of access to the data, the cybercriminals behind the recent hacks targeting…

Malaysia Airlines suffers data security ‘incident’ spanning nine years

Malaysia Airlines suffers data security ‘incident’ spanning nine years

Malaysia Airlines suffers data security ‘incident’ spanning nine years | IT Security News Latest topics for ZDNet in Security 2. March 2021 Security breach compromises personal data of the airline’s frequent flyer programme Enrich, including members’ contact details and date of birth, and reportedly involved a third-party IT service provider in an “incident” stretching June…

Jailbreak Tool ‘unc0ver’ 6.0.0 Released With iOS 14.3 Compatibility

Jailbreak Tool ‘unc0ver’ 6.0.0 Released With iOS 14.3 Compatibility

MacRumors: Mac News and Rumors – Front Page 28. February 2021 The team behind the “unc0ver” jailbreaking tool for iOS has released version 6.0.0 of its software, which can allegedly be used to jailbreak any device running iOS 11.0 through iOS 14.3 using a kernel vulnerability. The unc0ver website describes how the tool has been…

Coverage Advisory for Zero-day Exploits Related to Microsoft

Coverage Advisory for Zero-day Exploits Related to Microsoft

Background Microsoft has reported multiple exploits being used to attack on-premises versions of Microsoft Exchange Server in limited and targeted attacks. In the attacks observed, the threat actor used these vulnerabilities to access on-premises Exchange servers which enabled access to email accounts, and allowed installation of additional malware to facilitate long-term access to victim environments….

Chinese hackers targeted India’s power through malware amid border tension: Report

Chinese hackers targeted India’s power through malware amid border tension: Report

The report has led to raising suspicion whether last year’s massive power outage in Mumbai was a result of the online intrusion Washington: Amidst the tense border tension between India and China, a Chinese government-linked group of hackers targeted India’s critical power grid system through malware, a US company has said in its latest study,…

Microsoft says China hacked Exchange email product

Microsoft says China hacked Exchange email product

Microsoft said that its Exchange email product had been compromised by Chinese hackers. The company said it believes the group, which it named “Hafnium,” was supported by the Chinese state. Microsoft also released security updates to combat the hacks. Visit the Business section of Insider for more stories. Microsoft announced Tuesday that its Exchange email…

Max level vulnerability found in Logix PLCs

Max level vulnerability found in Logix PLCs

A new vulnerability discovered in various Rockwell Automation programmable logic controllers (PLC) has received a 10 out of 10 risk score, the highest possible on the CVSS vulnerability scale. The new vulnerability is being tracked as CVE-2021-22681. Attackers can abuse this flaw in the Logix Designer 5000 software to gain the secret cryptographic key, which…