CVE-2020-23533 – Alert Detail – Security Database

The U.S. Department of Justice is elevating investigations of ransomware attacks to a similar priority as terrorism in the wake of the Colonial Pipeline hack and mounting damage caused by cyber criminals, a senior department official told Reuters. From the report: Internal guidance sent on Thursday to U.S. attorney’s offices across the country said information…

Unknown attackers recently attempted to carry out a large-scale supply-chain attack by introducing malicious code to the official PHP GIT repository. If the developers hadn’t noticed the backdoor in time, it could have ended up on many Web servers and led to the largest supply-chain attack in history. What happened with PHP The programmers who…

There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verification may cause the system to restart.

The Biden administration is preparing to issue a series of actions, including sanctions, to make it more difficult for hackers to profit off of ransomware attacks through the use of digital currency, as first reported by the Wall Street Journal on Friday. According to the Journal, the Treasury Department plans to impose these new sanctions…

New Delhi, July 25 (IANS) Microsoft has warned customers about a new crypto mining malware that can steal credentials, remove security controls, spread via emails and ultimately drop more tools for human-operated activity. Called ‘LemonDuck’, the crypto mining malware is targeting Windows and Linux systems, spreading via phishing emails, exploits, USB devices and brute force…

Governance & Risk Management , Incident & Breach Response , IT Risk Management Hacker Claiming Responsibility for Attack Calls Company’s Security ‘Awful’ Doug Olenick (DougOlenick) • August 27, 2021     T-Mobile CEO Mike Sievert T-Mobile CEO Mike Sievert on Friday issued an official mea culpa for the data breach that exposed information on 54…