Hackers Exploit Accellion Zero-Days in Recent Data Theft and Extortion Attacks

A ransomware attack paralyzed the networks of at least 200 U.S. companies Friday, according to a cybersecurity researcher whose company was responding to the incident.   The REvil gang, a major Russian-speaking ransomware syndicate, appears to be behind the attack, said John Hammond of the security firm Huntress Labs. He said the criminals targeted a…

Last week a vulnerability made its way to the internet after researchers accidentally published a proof of concept. That proof of concept exploited a series of vulnerabilities in the Windows Print Spooler service. The vulnerability was dubbed PrintNightmare and until now the best way to avoid it was to disable the Print Spooler service which…

Forensics , Fraud Management & Cybercrime , Fraud Risk Management Banisher of ‘The Kaminsky Bug’ Lauded for His Drive to ‘Make Things Better’ Mathew J. Schwartz (euroinfosec) • April 27, 2021     Dan Kaminsky in an interview conducted at the 2016 RSA Conference in San Francisco (Photo: ISMG) The information security community is mourning…

By Jack M. Germain Mar 26, 2021 7:51 AM PT Cloud cybersecurity — or a lack of it — is feeding a frenzy of companies out of the public cloud. A similar concern about managing compliance obligations is keeping organizations from moving to the cloud in general. However, much of the growing concerns over cloud…

Fraud Management & Cybercrime , Fraud Risk Management , Next-Generation Technologies & Secure Development Spearheaded by Ryuk and Vatet, Gangs Wield Commodity Downloaders, Researchers Warn Mathew J. Schwartz (euroinfosec) • March 25, 2021     Ryuk ransom note (Source: Coveware) Criminals operating online continue to tap ransomware in their pursuit of an illicit payday. See…

The US Department of Homeland Security (DHS) has announced new pipeline cybersecurity requirements after the largest fuel pipeline in the United States was forced to shut down operations in early May following a ransomware attack. The new security directive requires critical pipeline owners and operators to report any confirmed and potential cybersecurity incidents to the Cybersecurity and Infrastructure Security…