An “aggressive” financially motivated threat group tapped into a zero-day flaw in SonicWall VPN appliances prior to it being patched by the company to deploy a new strain of ransomware called FIVEHANDS.
The group, tracked by cybersecurity firm Mandiant as UNC2447, took advantage of an “improper SQL command neutralization” flaw in the SSL-VPN SMA100 product (CVE-2021-20016, CVSS score 9.8) that
Cyber attack hits State Department in ‘possible serious breach’ Tap here to add The Western Journal to your home screen.
Datto Holding Corp. has acquired BitDam Ltd., an Israeli cyberthreat detection company. The financial terms of the acquisition were not disclosed. Weller BitDam’s cyberdefense platform secures collaboration tools, including M365 and Google Workspace, from ransomware, malware and phishing, by proactively defending against cybersecurity breaches within a user’s inbox, chat or cloud drive. “This acquisition marks…
A new academic study has highlighted a number of privacy and security pitfalls associated with recycling mobile phone numbers that could be abused to stage a variety of exploits, including account takeovers, conduct phishing and spam attacks, and even prevent victims from signing up for online services. Nearly 66% of the recycled numbers that were…
Endpoint Security , Governance & Risk Management , Internet of Things Security ‘Arson Cat’ Hacker Tillie Kottmann Says She’s Not Worried About Law Enforcement Jeremy Kirk (jeremy_kirk) • March 12, 2021 Photo: Verkada Tales of unsecure IoT cameras come along with regularity. But it’s going to be tough to top the system-wide failure…
Researchers: ‘Jian’ Hacking Tool Targeted Zero-Day Flaw in Windows Scott Ferguson (Ferguson_Writes) • February 22, 2021 A Chinese hacking group reportedly “cloned” and deployed a zero-day exploit developed by the U.S. National Security Agency’s Equation Group before Microsoft patched the Windows vulnerability that was being exploited in 2017, according to an analysis published…
The White House said it was reaching out to victims of a wide-ranging ransomware outbreak that is centred on IT company Kaseya and has had an impact on hundreds of businesses worldwide. Kaseya has said that fewer than 60 of its customers had been “directly affected” by the attack. But the full impact of the…
