CVE-2021-1078

New malware that has been active for over a year has compromised Windows containers in order to further hack Kubernetes clusters and install backdoors in them with the aim of further malicious activity. Originally developed by Google and now maintained by the Cloud Native Computing Foundation, Kubernetes is an open-source system for automating the deployment,…

TA456 was discovered as the perpetrator of a social engineering and targeted malware campaign on behalf of the Iranian government after spending years impersonating an aerobics instructor on Facebook, according to Proofpoint.  The Iranian state-sponsored cybercrime gang developed a contact with an employee working at a subsidiary of an aerospace defense contractor using the social…

3rd Party Risk Management , Account Takeover Fraud , Application Security & Online Fraud Tom Kellermann of VMware Carbon Black on Fraud Trends and Essential Defenses Tom Field (SecurityEditor) • April 13, 2021     Tom Kellermann, head of cybersecurity strategy, VMware Carbon Black Brokerage account takeover, supply chain attacks,…

If you’re a member of the US military who’s gotten friendly Facebook messages from private-sector recruiters for months on end, suggesting a lucrative future in the aerospace or defense contractor industry, Facebook may have some bad news. On Thursday, the social media giant revealed that it has tracked and at least partially disrupted a long-running…

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Governance & Risk Management Cybereason’s Sam Curry Shares Insights on the Latest Developments Anna Delaney (annamadeline) • July 19, 2021     Sam Curry, CSO, Cybereason The U.S and its allies formally accusing China of cyberattacks on Microsoft Exchange servers…

But Jason Hsu, chief investment officer at Rayliant, an asset manager that invests in Chinese securities, said Chinese regulators typically have discussions with companies about regulatory actions they are about to take. “So one would assume that ahead of its IPO, Didi was aware of a possible formal investigation forthcoming,” Hsu said. Breakneck float The…