Malware Makers Using ‘Exotic’ Programming Languages

Recently, APT group or the state-sponsored hackers have exploited the vulnerabilities in an unpatched Fortinet VPN to compromise the webserver of a U.S. municipal government web server, as reported by the FBI (Federal Bureau of Investigation). The APT (Advanced Persistent Threat) hackers created new servers, domain controllers, and workstation user accounts just after gaining access…

John McAfee testifying via video during an extradition hearing at the National Court in Madrid on June 15. (AP pic) BARCELONA: Anti-virus software pioneer John McAfee’s lawyer said on Thursday he had seen no sign before the entrepreneur’s death in a Spanish prison that he would take his own life. Spanish coroners were conducting an…

Governance & Risk Management , IT Risk Management , Patch Management Permanent Fix Replaces Earlier Workaround Scott Ferguson (Ferguson_Writes) • May 3, 2021     Ivanti, parent company of Pulse Secure, published a permanent fix Monday for a zero-day vulnerability in Pulse Connect Secure VPN products that has been exploited to target U.S. government agencies,…

MENLO PARK (AP) — Details from more than 500 million Facebook users have been found available on a website for hackers. The information appears to be several years old but it is another example of the vast amount of information collected by Facebook and other social media sites and the limits to how secure that…

Endpoint Security , Fraud Management & Cybercrime , Governance & Risk Management We Aren’t ‘Live,’ But Have Mobilized to Share Top Insights From Industry’s Leaders Tom Field (SecurityEditor) • May 17, 2021     One view of RSA in a previous, non-virtual form Where to begin? Rohit Ghai, the CEO of RSA, discusses the new…

Cybersecurity researchers disclosed details about 13 vulnerabilities in the Nagios network monitoring application that could be abused by an adversary to hijack the infrastructure without any operator intervention. “In a telco setting, where a telco is monitoring thousands of sites, if a customer site is fully compromised, an attacker can use the vulnerabilities to compromise…