CVE-2021-1078
NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel driver (nvlddmkm.sys) where a NULL pointer dereference may lead to system crash.
Accenture spotted the LockBit ransomware attack on its systems as far back as July 30 and found that hackers had stolen documents referencing clients, as well as work materials created on clients’ behalf, according to a report from cybersecurity news site CyberScoop. The publicly traded IT consultancy initially confirmed the ransomware attack on Wednesday in…
Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management FireEye: Attackers Using New Malware and Procedures Doug Olenick (DougOlenick) • May 28, 2021 Two China-linked threat groups are still exploiting unpatched flaws in Ivanti’s Pulse Connect Secure VPN products, using additional malware variants to support cyberespionage, FireEye’s Mandiant Threat…
What does your cloud security solution look like? That depends on you. Our extensive capabilities provide real-world recommendations tailored to your company’s unique initiatives – the result is an enterprise-grade, scalable cloud security program, modernized DevSecOps and consolidation of cloud tools. We assess, design, implement and manage an end-to-end cloud program that is security-focused and…
CopperStealer Malware Attacks Facebook and Instagram Business Accounts | IT Security News 23. March 2021 The cybersecurity researchers at Proofpoint have recently issued all the details regarding a new undocumented malware, which is dubbed as “CopperStealer.” According to the report, the threat actors are spreading this undocumented malware via fake software that continuously destroying the…
3rd Party Risk Management , Application Security , Critical Infrastructure Security Flaw in Serv-U File-Transfer Software Unconnected to Orion Supply Chain Attack Akshaya Asokan (asokan_akshaya) • July 13, 2021 Attackers have been exploiting a newly discovered zero-day flaw in SolarWinds software, the security vendor has warned. See Also: Live Panel | Zero Trusts…
SolarWinds told Congress that using the password ‘solarwinds123’ was an intern’s mistake. A key researcher told Insider the log-in information was posted publicly on GitHub for years. Cybersecurity experts say the issue appears to represent more than an intern’s weak password. Visit the Business section of Insider for more stories. Two SolarWinds CEOs told the…