CVE-2021-35392

Following the release of a U.S. Cybersecurity & Infrastructure Security Agency (US-CERT)  Coordination Center VulNote “for a critical remote code execution vulnerability in the Windows Print spooler services” on June 30, 2021, Microsoft issued new guidance for the vulnerability (CVE-2021-34527) on July 1, updated guidance on July 2, 2021, and an emergency patch on July…

A Chinese national flag flutters outside the China Securities Regulatory Commission (CSRC) building on the Financial Street in Beijing, China July 9, 2021. REUTERS/Tingshu Wang BEIJING, Aug 1 (Reuters) – China’s securities regulator said on Sunday it will seek closer cooperation with its U.S. counterpart and will support overseas listings, after U.S. regulators tightened disclosure…

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Governance & Risk Management Agency Is the Latest Victim of Attacks Exploiting Newly Exposed Flaws Akshaya Asokan (asokan_akshaya) • March 9, 2021     A Microsoft Exchange Server at the European Banking Authority, a regulatory agency of the European Union, was hacked. But the agency…

Finance & Banking , Fraud Management & Cybercrime , Fraud Risk Management How Banks and Insurance Providers can Leverage Modern Solutions for Modern Fraud Simon Viney • August 24, 2021     Where there is money and people, cyber crime isn’t usually far behind, and this was exacerbated in 2020 when financial institutions (FIs) were…

Hundreds of American businesses were hit Friday by an unusually sophisticated ransomware attack that hijacked widely used technology management software from a Miami-based supplier called Kaseya. The attackers changed a Kaseya tool called VSA, used by companies that manage technology at smaller businesses. They then encrypted the files of those providers’ customers simultaneously. Security firm…

In 2018, industry and academic researchers revealed a potentially devastating hardware flaw that made computers and other devices worldwide vulnerable to attack. Researchers named the vulnerability Spectre because the flaw was built into modern computer processors that get their speed from a technique called “speculative execution,” in which the processor predicts instructions it might end up executing…