CVE-2021-1572
CVE-2021-1572
Another day, and it’s time for another Apple security scare: malware that can harvest keystrokes and log-ins and is available on the Darknet for only $49. Malware-as-a-service for Mac attacks Check Point Software’s research team claims to have identified the hack, which it is calling XLoader. Enterprise security specialists managing Macs and Apple devices (of which there…
Softpedia News / Security 8. June 2021 This article has been indexed from Softpedia News / Security The US Department of Justice charged a woman for her alleged involvement as a programmer in a cybercrime group that helped develop TrickBot, according to The Hacker News. The woman in question, Alla Witte, nicknamed Max, of…
3rd Party Risk Management , Business Continuity Management / Disaster Recovery , Critical Infrastructure Security ‘Free’ Decryptors and Promises of Retirement Plans Are Empty Criminal Marketing Spin Mathew J. Schwartz (euroinfosec) • May 21, 2021 “The affiliate program is closed. Stay safe and good luck,” DarkSide announced in this May 13 note. (Source:…
Codecov announced that a threat actor had hacked its Bash Uploader script, therefore exposing sensitive information in customers’ continuous integration environment. The platform learned about the compromise on April 1st, but it seems that the first signs of the supply-chain attack occurred in January. With a customer base of more than 29,000 enterprises, the list…
The US Department of Homeland Security (DHS) has announced new pipeline cybersecurity requirements after the largest fuel pipeline in the United States was forced to shut down operations in early May following a ransomware attack. The new security directive requires critical pipeline owners and operators to report any confirmed and potential cybersecurity incidents to the Cybersecurity and Infrastructure Security…
Pegasus Spyware Targets Phones of Journalists, Activists, and Politicians | IT Security News Android App Android App with push notifications Sponsors Endpoint Cybersecurity www.endpoint-cybersecurity.com – Consulting in building your security products– Employee awareness training– Security tests for applications and pentesting… and more. Daily Summary Categories CategoriesSelect Category(ISC)2 Blog (323)(ISC)2 Blog infosec (13)(ISC)² Blog (389)2020-12-08 – Files for an…