In call, Joe Biden presses Vladimir Putin to act on ransomware attacks

In call, Joe Biden presses Vladimir Putin to act on ransomware attacks

Jen Psaki said that Mr. Biden told Mr. Putin that, even if actors were not directed by the Russian government, “you still have a responsibility.” U.S. President Joe Biden on Friday pressed Russian President Vladimir Putin to act against groups conducting ransomware attacks from Russia, the White House said. “President Biden underscored the need for…

RNC says contractor breached in hack, GOP data secure

RNC says contractor breached in hack, GOP data secure

The Republican National Committee (RNC) on Tuesday acknowledged that one of its contractors had been breached by hackers linked to Russia but said its data had not been accessed.  Bloomberg News reported Tuesday that the Russian advanced persistent threat (APT) 29 group had breached the RNC’s computer systems last week by compromising Synnex, a third-party technology provider. …

Biden warns Putin on Russian ransomware attacks

Biden warns Putin on Russian ransomware attacks

President BidenJoe BidenJohn Kerry to visit Moscow officials to discuss ‘global climate ambition’ Civil rights leaders find meeting with WH ‘encouraging’ amidst voting rights battle Pentagon eyes places to send Afghan interpreters as Biden pledges evacuations by end of July MORE spoke by phone with Russian President Vladimir PutinVladimir Vladimirovich PutinJohn Kerry to visit Moscow…

Kaseya warns of phishing campaign pushing fake security updates

Kaseya warns of phishing campaign pushing fake security updates

Kaseya has warned customers that an ongoing phishing campaign attempts to breach their networks by spamming emails bundling malicious attachments and embedded links posing as legitimate VSA security updates. “Spammers are using the news about the Kaseya Incident to send out fake email notifications that appear to be Kaseya updates. These are phishing emails that…

The Business of Ransomware: Specialists Help Boost Profits

The Business of Ransomware: Specialists Help Boost Profits

Business Continuity Management / Disaster Recovery , Cybercrime , Cybercrime as-a-service Ransomware-as-a-Service Operations Tap Expert Intrusion Specialists and Negotiators Mathew J. Schwartz (euroinfosec) • July 9, 2021     Intrusion specialists’ advertisement on a cybercrime forum seeking a ransomware operation partner to collaborate via specified terms (Source: Kela) As ransomware attacks become more prolific, their…

List of Victims of Kaseya Ransomware Attack Grows

List of Victims of Kaseya Ransomware Attack Grows

Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime , Governance & Risk Management 2 Maryland Towns Report Malware on Their Networks Doug Olenick (DougOlenick) • July 8, 2021     REvil’s darknet announcement offering a decryptor for sale (Source: Trustwave) Two small Maryland towns are among the latest victims to come to…

Chinese regulators will tighten controls of domestic firms listed overseas following a cybersecurity probe of Didi

Chinese regulators will tighten controls of domestic firms listed overseas following a cybersecurity probe of Didi

A Didi logo is seen at the headquarters of Didi Chuxing in Beijing on November 20, 2020. REUTERS/Florence Lo/File Photo/File Photo Chinese regulators said they will tighten control of domestic firms listed overseas. The move came after the Beijing-led cybersecurity probe against Didi, Reuters reported. On Sunday, China said Didi “has serious violations of laws…

Microsoft Issues Emergency Software Update for PrintNightmare Zero Day Vulnerability | Robinson+Cole Data Privacy + Security Insider

Microsoft Issues Emergency Software Update for PrintNightmare Zero Day Vulnerability | Robinson+Cole Data Privacy + Security Insider

Following the release of a U.S. Cybersecurity & Infrastructure Security Agency (US-CERT)  Coordination Center VulNote “for a critical remote code execution vulnerability in the Windows Print spooler services” on June 30, 2021, Microsoft issued new guidance for the vulnerability (CVE-2021-34527) on July 1, updated guidance on July 2, 2021, and an emergency patch on July…

Cisco Talos Intelligence Group – Comprehensive Threat Intelligence: InSideCopy: How this APT continues to evolve its arsenal

Cisco Talos Intelligence Group – Comprehensive Threat Intelligence: InSideCopy: How this APT continues to evolve its arsenal

By Asheer Malhotra and Justin Thattil. Cisco Talos is tracking an increase in SideCopy’s activities targeting government personnel in India using themes and tactics similar to APT36 (aka Mythic Leopard and Transparent Tribe). SideCopy is an APT group that mimics the Sidewinder APT’s infection chains to deliver its own set of malware. We’ve discovered multiple…