Compromised Microsoft Exchange Server Used to Host Cryptominer

Microsoft researchers on Thursday disclosed two dozen vulnerabilities affecting a wide range of Internet of Things (IoT) and Operational Technology (OT) devices used in industrial, medical, and enterprise networks that could be abused by adversaries to execute arbitrary code and even cause critical systems to crash. “These remote code execution (RCE) vulnerabilities cover more than…

Fraud Management & Cybercrime , Fraud Risk Management , Social Media Account Used to Attempt Cryptocurrency Fraud Prajeet Nair (@prajeetspeaks) • May 25, 2021     (Source: Tom Raftery via Flickr/CC) Carl Pei, co-founder of OnePlus, a smartphone company, said Tuesday that his Twitter account had been compromised via a third-party app called IFTTT and…

Yesterday, the NSA alerted Microsoft of a new batch of critical vulnerabilities that threat actors could exploit to remotely compromise the Exchange Server email software program. The tech giant said that it hadn’t seen any hacks using the vulnerabilities on its customers, but the news comes at a time of great concern over bugs in…

Posted on June 8, 2021 by Nick Farrell – News Deloitte & Touche has made its second cloud cybersecurity acquisition of the year, buying almost all  CloudQuest’s assets. The idea is that CloudQuest’s cloud-native security capabilities will help Deloitte more seamlessly manage security workflows, reduce risk and improve data security as it expands its portfolio…

Although Facebook has been banned in China, the company recently exposed hackers who used the social media platform to lure Uyghurs into downloading malicious software used for surveillance. According to Facebook’s Mike Dvilyanski, Head of Cyber Espionage Investigations, and Nathaniel Gleicher, Head of Security Policy, hackers “targeted activists, journalists and dissidents predominantly among Uyghurs from…

Lazarus APT, a North Korean threat actor known for its sophisticated attacks, has been observed using a clever method to bypass security mechanisms by hiding its malicious code within a bitmap (.BMP) image file used to drop a remote access trojan (RAT) capable of stealing sensitive information. According to researchers at Malwarebytes Labs,…