Crypto Hack Earned Crooks $600 Million

​A new iPhone bug has come to light that breaks your iPhone’s wireless functionality by merely connecting to a specific WiFi hotspot. Once triggered, the bug would render your iPhone unable to establish a WiFi connection, even if it is rebooted or the WiFi hotspot is renamed. A bug like this could be exploited by malicious…

Executive Summary Informations Name CVE-2021-25204 First vendor Publication 2021-07-23 Vendor Cve Last vendor Modification 2021-07-23 Security-Database Scoring CVSS v3 Cvss vector : N/A Overall CVSS Score NA Base Score NA Environmental Score NA impact SubScore NA Temporal Score NA Exploitabality Sub Score NA   Calculate full CVSS 3.0 Vectors scores Security-Database Scoring CVSS v2 Cvss…

CNA Financial, one of the largest insurance companies in the US, reportedly paid hackers $40 million after a ransomware attack blocked access to the company’s network and stole its data, according to a report from Bloomberg’s Kartikay Mehrotra and William Turton.  CNA first announced the hack in late March, stating that it had seen a…

3rd Party Risk Management , Application Security , Critical Infrastructure Security Flaw in Serv-U File-Transfer Software Unconnected to Orion Supply Chain Attack Akshaya Asokan (asokan_akshaya) • July 13, 2021     Attackers have been exploiting a newly discovered zero-day flaw in SolarWinds software, the security vendor has warned. See Also: Live Panel | Zero Trusts…

Researchers have discovered a new information-stealing trojan, which targets Android devices with an onslaught of data-exfiltration capabilities — from collecting browser searches to recording audio and phone calls. While malware on Android has previously taken the guise of copycat apps, which go under names similar to legitimate pieces of software, this sophisticated new malicious app…

Breach Notification , Endpoint Security , Governance & Risk Management Details on 2 of the 3 Vulnerabilities Released Mihir Bagwe • September 7, 2021     Gynvael Coldwind, a security researcher on Google’s security team, has identified three critical vulnerabilities affecting several Netgear smart switch products that, if exploited, give the attacker complete control over…