CVE-2021-1522

Ethical hackers now have many more targets within the Defense Department, DOD officials announced. The department is expanding its Vulnerability Disclosure Program to include all publicly accessible DOD information systems. The program grew out of the success of the “Hack the Pentagon” initiative that began in 2016. That initiative enabled the Defense Digital Service…

Business Continuity Management / Disaster Recovery , Critical Infrastructure Security , Finance & Banking Operational Error Blamed for Nationwide System Crash Doug Olenick (DougOlenick) • February 24, 2021     The Federal Reserve’s online money transfer system, including Fedwire Funds and Fedcash, suffered an outage for more than three hours Wednesday afternoon, citing technical issues…

Endpoint Security , Governance & Risk Management , IT Risk Management Flaw Could Enable Access to Secret Encryption Key Prajeet Nair (@prajeetspeaks) • March 1, 2021     Rockwell’s Studio 5000 Logix Designer is among products affected by a vulnerability. (Source: Rockwell) A critical authentication bypass vulnerability could enable hackers to remotely compromise programmable logic…

Active since 2014, RedFoxtrot predominantly targets aerospace and defense, government, telecommunications, mining, and research organizations in India among other countries. The other countries are Afghanistan, Kazakhstan, Kyrgyzstan, Pakistan, Tajikistan, and Uzbekistan, aligning with the operational remit of PLA Unit 69010. Recorded Future, the world’s largest provider of intelligence for enterprise security, on Thursday, revealed cyber…

Cybercrime , Cybercrime as-a-service , Cyberwarfare / Nation-State Attacks Biden Administration Says Attempted Ransomware Disruption Efforts Won’t Be Immediate Mathew J. Schwartz (euroinfosec) • July 12, 2021     REvil ransom note seen by victims of the ransomware attack involving Kaseya’s software (Source: Cisco Talos) As the Biden administration attempts to force Russia to crack…

Governance & Risk Management , Patch Management Experts Say Advisory Highlights Vulnerability Management Challenges Dan Gunderman (dangun127) • July 30, 2021     Source: CISA A joint cybersecurity advisory issued by several agencies this week highlighting the ongoing exploits of longstanding software vulnerabilities illustrates the woeful state of patch management, security experts say. See Also:…