Attackers are exploiting a recently-patched, critical vulnerability in F5 devices that have not yet been updated. The unauthenticated remote command execution flaw (CVE-2021-22986) exists in the F5 BIG-IP and BIG-IQ enterprise networking infrastructure, and could allow attackers to take full control over a vulnerable system.
Governance & Risk Management , Incident & Breach Response , IT Risk Management Department Recently Received a ‘D’ Grade for Its Cybersecurity Defenses Prajeet Nair (@prajeetspeaks) • August 23, 2021 Secretary of State Antony Blinken briefing reporters earlier this month (Source: State Department) The U.S. State Department reportedly recently sustained a cyber incident…
PrintNightmare is a 0-day vulbnerability in the widely used Windows Print Spooler service. And working exploits are out there. In a rush to be the first to publish a proof-of-concept (PoC), researchers have published a write-up and a demo exploit to demonstrate a vulnerability that has been dubbed PrintNightmare. Only to find out they had…
Apple has fixed a flaw that was letting hackers spy on devices without users even clicking a link. The zero-click hack gave access to device cameras, microphones, and messages without users knowing. Apple is telling users to update their iPhones, Macs, and Apple Watches immediately to protect them. Loading Something is loading. Apple is warning…
Breach Notification , Cybercrime , Cybercrime as-a-service 40 Million Credit Applications Also Stolen; Social Security Numbers Exposed Mathew J. Schwartz (euroinfosec) • August 18, 2021 T-Mobile’s store in Times Square, New York (Photo: T-Mobile) T-Mobile USA has confirmed that its systems were breached and that investigators have found that details for 8.6 million…
New data suggests someone has compromised more than 21,000 Microsoft Exchange Server email systems worldwide and infected them with malware that invokes both KrebsOnSecurity and Yours Truly by name. Let’s just get this out of the way right now: It wasn’t me. The Shadowserver Foundation, a nonprofit that helps network owners identify and fix security…
CNA Financial, one of the largest insurance companies in the US, reportedly paid hackers $40 million after a ransomware attack blocked access to the company’s network and stole its data, according to a report from Bloomberg’s Kartikay Mehrotra and William Turton. CNA first announced the hack in late March, stating that it had seen a…
