Compromised Microsoft Exchange Server Used to Host Cryptominer

Critical Infrastructure Security , Digital Identity , Endpoint Security Critical Networks Within National Security Systems Should Implement Zero Trust Akshaya Asokan (asokan_akshaya) • February 27, 2021     NSA: Consider Zero Trust models for all National Security Systems’ critical networks Source: NSA The US National Security Agency has issued its zero trust guidance aimed at…

A team of cyber-security researchers has discovered security flaws in popular e-reading device Amazon Kindle that might have led hackers to take full control of a Kindle device, opening a path to stealing information stored. By tricking victims into opening a malicious e-book, a threat actor could have leveraged the flaws to target specific demographics…

Endpoint Protection Platforms (EPP) , Endpoint Security Automatic Translation Bypasses Security Restrictions Prajeet Nair (@prajeetspeaks) • June 29, 2021     Microsoft recently released updates for the Edge browser, including a fix for a bypass vulnerability that could allow a remote attacker to bypass implemented security restrictions. See Also: Live Panel | Zero Trusts Given-…

A malicious Xcode project known as XcodeSpy is targeting iOS devs in a supply-chain attack to install a macOS backdoor on the developer’s computer. Xcode is a free application development environment created by Apple that allows developers to create applications that run on macOS, iOS, tvOS, and watchOS.  Like other development environments, it is common…

Indonesian authorities have found no evidence that the country’s main intelligence service’s computers were compromised after a US-based private cybersecurity company alerted them of a suspected breach of its internal networks by a Chinese hacking group, an official said. The Insikt Group, the threat research division of Massachusetts-based Recorded Future, said it discovered the…

Endpoint Security , Governance & Risk Management , Internet of Things Security Low-Bandwidth Network Can Share Internet Connections Among Amazon Devices Doug Olenick (DougOlenick) • June 3, 2021     Devices such as Amazon’s Ring cameras will be part of the company’s Sidewalk low-bandwidth network. Internet of things security professionals are expressing concern over Amazon’s…