New 0-Day Attack Targeting Windows Users With Microsoft Office Documents

NGA Picks Four States for Academy on Cybersecurity PolicyFour states have been chosen by the National Governors Association (NGA) for its 2021 Policy Academy to Advance Whole-of-State Cybersecurity. Kansas, Missouri, Montana, and Washington have all been selected by the NGA Center for Best Practices to work directly with the NGA on cybersecurity governance, workforce development, and government partnership…

Cybercrime , Endpoint Security , Fraud Management & Cybercrime Companies Report Several of Their Products Are Vulnerable Doug Olenick (DougOlenick) • March 6, 2021     Supermicro and Pulse Secure have each issued advisories this past week warning users that some of their products are vulnerable to the updated version of Trickbot malware that features…

The hacking group behind the recent cyber-attack targeting Accellion’s FTA file transfer service appears to be linked to a threat actor known as FIN11, security researchers with FireEye’s Mandiant division reveal. The attacks on FTA, a soon-to-be-retired service, started in mid-December 2020 and resulted in the compromise of data pertaining to multiple Accellion customers. As…

Microsoft rolled out Patch Tuesday updates for the month of July with fixes for a total of 117 security vulnerabilities, including nine zero-day flaws, of which four are said to be under active attacks in the wild, potentially enabling an adversary to take control of affected systems. Of the 117 issues, 13 are rated Critical,…

Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime , Governance & Risk Management Software Vendor Said Approximately 60 MSPs and 1,500 Clients Affected by Attack Doug Olenick (DougOlenick) • July 22, 2021     Kaseya Executive Vice President Mike Sanders (Source: Kaseya) Three weeks after its software was used to facilitate a…

Microsoft stands to receive nearly a quarter of Covid relief funds destined for US cybersecurity defenders, angering some lawmakers who don’t want to increase funding for a company whose software was recently at the heart of two big hacks. Congress allocated the funds at issue in the Covid relief bill after two enormous cyber attacks…