CVE-2021-35392

BlackBerry this week informed customers that the QNX embedded operating system is affected by a BadAlloc vulnerability leading to arbitrary code execution or denial of service. Publicly disclosed in April, BadAlloc is a collection of 25 vulnerabilities impacting many Internet of Things (IoT) and operational technology (OT) devices. The flaws can allow malicious attackers to…

The company says recovery from the attack may delay transactions with customers and suppliers. JBS USA, a major meat producer, says it was the victim of a cyberattack over the weekend. The company says the attack targeted servers supporting its North American and Australian IT systems. JBS’ backup servers were not affected, and a statement from…

The SolarWinds logo is seen outside its headquarters in Austin, Texas, U.S., December 18, 2020. REUTERS/Sergio Flores/File Photo U.S. President Joe Biden’s proposed budget includes $750 million for the government agencies hit by the SolarWinds hack to pay for cybersecurity improvements to prevent another attack. The money comes on top of a $500 million fund…

Cybersecurity TSA imposes new cyber rules on pipeline operators By Adam Mazmanian Jul 20, 2021   Fuel pipeline operators will have to institute measures to guard against ransomware attacks and other known cybersecurity threats under a new directive issued Tuesday by the Transportation Security Administration. This is the second directive issued by TSA…

Zscaler Says It Prevented Over 2,500 Phishing Attacks Akshaya Asokan (asokan_akshaya) • March 7, 2021     Attackers steal login credentials via fake Google reCAPTCHA screens. (Source: Pixabay) A Microsoft-themed phishing campaign is using phony Google reCAPTCHA in an attempt to steal credentials from senior employees of various organizations, a new report by security firm…

Fraud Management & Cybercrime , Legislation & Litigation , Ransomware Sponsor of Bill Says Ransomware Attacks Are ‘Completely Out of Control’ Prajeet Nair (@prajeetspeaks) • June 23, 2021     A bill introduced this week in the Australian Parliament would make it mandatory for organizations based in the country to report to the Australian Cyber…