Israel cyber attack on Iran Natanz Nuclear Facility – IT Security News

Governance & Risk Management , Government , Industry Specific Congressional Report Highlights a Lack of Progress Doug Olenick (DougOlenick) • August 3, 2021     A congressional report examining eight federal agencies found that seven continue to improperly protect sensitive data and do not meet basic cybersecurity standards. See Also: Live Panel | How Organizations…

PrintNightmare is a 0-day vulbnerability in the widely used Windows Print Spooler service. And working exploits are out there. In a rush to be the first to publish a proof-of-concept (PoC), researchers have published a write-up and a demo exploit to demonstrate a vulnerability that has been dubbed PrintNightmare. Only to find out they had…

Click Studios, the Australian software house that develops the enterprise password manager Passwordstate, has warned customers to reset passwords across their organizations after a cyberattack on the password manager. An email sent by Click Studios to customers said the company had confirmed that attackers had “compromised” the password manager’s software update feature in order to…

Breach Notification , Cybercrime , Cybercrime as-a-service University of Hertfordshire Is Among the Latest Victims Akshaya Asokan (asokan_akshaya) • April 17, 2021     The University of Hertfordshire has sustained a cyber incident that severely affected students’ online classes and an assignment submission portal. The university, however, notes the incident did not lead to data…

Endpoint Security , Internet of Things Security Researchers: Kalay Protocol Flaw Could Affect Millions of Connected Devices Scott Ferguson (Ferguson_Writes) • August 17, 2021     Example of how an attacker could exploit a vulnerability in ThroughTek’s Kalay protocol (Source: FireEye) FireEye researchers and the U.S. Cybersecurity and Infrastructure Security Agency are warning about a…

The New York Department of Financial Services (NYDFS) has issued an alert to instant-quote websites, particularly car insurers, warning of a growing campaign to steal nonpublic information (NPI). The agency says it learned of the threat after receiving reports from auto insurers that cybercriminals were targeting their premium quote sites to steal driver’s license numbers….