A newly uncovered cyberattack is taking control of victims’ Gmail accounts, by using a customized, malicious Mozilla Firefox browser extension called FriarFox. Researchers say the threat campaign, observed in January and February, targeted Tibetan organizations and was tied to TA413, a known….
The U.S. Securities and Exchange Commission (SEC) has opened an investigation into last year’s SolarWinds hack to determine whether some companies failed to disclose that they had been affected by the breach, Reuters reported, citing people familiar with the investigation. According to the sources, the SEC sent investigative letters last week to a number of…
CISA Warns Organizations of ProxyShell Attacks on Exchange Servers | IT Security News 23. August 2021 This article has been indexed from SecurityWeek RSS Feed The U.S. Cybersecurity and Infrastructure Security Agency (CISA) over the weekend issued an alert to warn of malicious actors actively exploiting the recently disclosed Microsoft Exchange vulnerabilities named ProxyShell. read…
Zoom Video Communications, the videoconferencing company whose internet app became a mainstay of American life during the coronavirus pandemic, has agreed to pay $85 million and improve its security practices to settle a lawsuit claiming it violated the privacy of its users. Filed in March 2020, not long after the pandemic reached the United States,…
Application Security , Cybercrime , Device Identification Swiss Citizen Allegedly Leaked Victims’ Stolen Data, Including Source Code Jeremy Kirk (jeremy_kirk) , Mathew J. Schwartz (euroinfosec) • March 19, 2021 A Swiss national who recently highlighted flaws in internet-connected Verkada surveillance cameras has been charged with hacking. See Also: Top 50 Security Threats …
The two-count indictment, which was returned in May and kept under seal until now, charges Ding Xiaoyang, Cheng Qingmin, and Zhu Yunmin were officers with the Hainan State Security Department, a provincial branch of China’s Ministry of State Security, or MSS. A fourth charged individual, Wu Shurong, was charged as a computer hacker who created…
SonicWall is just the latest security vendor to see its products used to perpetuate ransomware attacks. SonicWall has issued an urgent security notice warning users of unpatched End-Of-Life (EOL) SRA & SMA 8.X remote access devices that they have been made aware of an imminent ransomware campaign using stolen credentials. The exploitation targets a known…
