eCh0raix Ransomware Variant Targets QNAP, Synology NAS Devices

Encryption & Key Management , Next-Generation Technologies & Secure Development , Security Operations William Dixon of World Economic Forum on Improving Infrastructure Anna Delaney (annamadeline) • May 26, 2021     William Dixon, head of future networks and technology, World Economic Forum To unlock the value of quantum computing, two…

Pegasus – possibly the most powerful piece of spyware ever developed – has been found on mobile phones around the world. A major investigation is alleging that the malware was used to hack the phones of politicians, activists and prominent news editors worldwide. The hacking software – or spyware – is marketed and licensed to…

China-based government hackers have exploited a bug in Microsoft’s email server software to target U.S. organizations, the company said Tuesday. Microsoft said that a “highly skilled and sophisticated” state-sponsored group operating from China has been trying to steal information from a number of American targets, including universities, defence contractors, law firms and infectious-disease researchers. Microsoft…

Governance & Risk Management , IT Risk Management , Patch Management Company Also Plans to Upgrade All Page Loads to HTTPS Rashmi Ramesh • July 16, 2021     Google will soon release a security update to address eight vulnerabilities in its Chrome browser, including a high-severity zero-day flaw that’s being exploited in the wild….

Поступили новые сведения об уязвимости CVE-2021-31166, обнаруженной в системном драйвере Windows — HTTP.sys. Напомним, что с помощью бреши не прошедший аутентификацию злоумышленник может отправить специально созданные пакеты, эксплуатирующие дыру. По словам исследователя Джима Девриза, опасная….

Cybersecurity researchers on Tuesday disclosed details about a high-severity flaw in the HP OMEN driver software that impacts millions of gaming computers worldwide, leaving them open to an array of attacks. Tracked as CVE-2021-3437 (CVSS score: 7.8), the vulnerabilities could allow threat actors to escalate privileges to kernel mode without requiring administrator permissions, allowing them…