CISA, FBI Warn of Attacks Targeting Fortinet FortiOS

3rd Party Risk Management , Breach Notification , Critical Infrastructure Security Microsoft, FireEye Find Additional Payloads Used During Supply Chain Attack Scott Ferguson (Ferguson_Writes) • March 4, 2021     Researchers with Microsoft and FireEye are disclosing additional malware used by the hacking group that targeted SolarWinds in December 2020, according to a pair of…

Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management One-Click Mitigation Tool Provides Quick Fix for ProxyLogon Exchange Flaw Akshaya Asokan (asokan_akshaya) • March 16, 2021     Microsoft has released an interim mitigation tool designed to help smaller organizations take quick action to prevent attacks that exploit the unpatched ProxyLogon…

Microsoft пытается выяснить причину недавнего инцидента с бизнес-версией сервиса OneDrive. А произошло вот что: в определённый момент объёмы хранилища резко сбросились до настроек по умолчанию, а отдельные файлы получили статус «только чтение». В результате, конечно же, компаниям пришлось удалить часть файлов, чтобы продолжить работу над своими проектами. Сервис OneDrive для бизнеса предназначен для корпоративных клиентов….

Cybersecurity firm Rapid7 revealed that an unauthorized party accessed some of its source code in a security incident linked to the Codecov supply-chain attack. Last month, Codecov disclosed a security incident involving its Bash Uploader script, a tool that provides a framework and language-agnostic method for sending coverage reports to Codecov. The company…

Cybercrime , Fraud Management & Cybercrime , Fraud Risk Management Check Point Research Tracks Tenfold Increase in 5 Days Doug Olenick (DougOlenick) • March 16, 2021     From Thursday through Monday, Check Point Research tracked a tenfold increase in the number of attempts to exploit vulnerable on-premises Microsoft Exchange servers as many organizations are…

A new cyber espionage group named Gelsemium has been linked to a supply chain attack targeting the NoxPlayer Android emulator that was disclosed earlier this year. The findings come from a systematic analysis of multiple campaigns undertaken by the APT crew, with evidence of the earliest attack dating back all the way to 2014 under…