Cybercriminals are scanning servers for the Microsoft Exchange ProxyShell RCE vulnerabilities after technical details presented at the Black Hat

HOUSTON — The operator of the largest petroleum pipeline between Texas and New York, which was shut down after a ransomware attack, declined on Sunday to say when it would reopen, raising concerns about a critical piece of infrastructure that carries nearly half of the East Coast’s fuel supplies. While the shutdown has so far…

Digital threat researchers at Citizen Lab have uncovered a new zero-click iMessage exploit used to deploy NSO Group’s Pegasus spyware on devices belonging to Bahraini activists. In total, nine Bahraini activists (including members of the Bahrain Center for Human Rights, Waad, Al Wefaq) had their iPhones hacked in a campaign partially orchestrated by a Pegasus operator linked with high confidence…

Colonial system affected by the cyberattack. Colonial is the largest refined products pipeline in the U.S., transporting more than 100 million gallons, or 2.5 million barrels, per day. Its pipeline spans more the 5,500 miles throughout the Southern and Eastern U.S. (Map: Colonial Pipeline) Colonial Pipeline, which accounts for close to half of the United…

Governance & Risk Management , IT Risk Management , Patch Management The Flaw in Windows Graphics Component Can Enable Web-Based Attacks Akshaya Asokan (asokan_akshaya) • February 26, 2021     Microsoft has patched a critical vulnerability in Windows that can be exploited by tricking users to visit websites that use a malicious font. The flaw…

Chinese nation-state hackers have been linked to an attack on the Parliament of Finland that took place last year and led to the compromise of some parliament email accounts. “Some parliament e-mail accounts may have been compromised as a result of the attack, among them e-mail accounts that belong to MPs,” Parliament officials said at…

Sol Oriens, a US subcontractor for the Department of Energy that works on nuclear weapons was hit by a cyberattack last month that was allegedly the work of the infamous REvil ransomware gang. REvil posted a statement to its website that states that the malicious organization boasts the right to forward all relevant documentation and…