CVE-2021-27461
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs.
Gaza Strip resident: Sounds of war replaced birdsong
Economic development advocate Asmaa AbuMezied, who lives in the Gaza Strip, has told BBC World News about her experiences of the Israel-Gaza conflict. “We have to navigate throughout the day how we are going to deal with the drones that hover over our houses,” she said. “And then, when the night comes, we have to…
Codecov Hackers Accessed Monday.com Source Code
3rd Party Risk Management , Cybercrime , Fraud Management & Cybercrime Customers Apparently Not Affected, Monday.com Says Prajeet Nair (@prajeetspeaks) • May 19, 2021 Monday.com, which sells an online workflow management platform, reports that the Codecov supply chain attackers gained access to its source code. See Also: Splunk Security Predictions 2021 Codecov,…
Android Issues Patches for 4 New Zero-Day Bugs Exploited in the Wild
Google on Wednesday updated its May 2021 Android Security Bulletin to disclose that four of the security vulnerabilities that were patched earlier this month by Arm and Qualcomm may have been exploited in the wild as zero-days. “There are indications that CVE-2021-1905, CVE-2021-1906, CVE-2021-28663 and CVE-2021-28664 may be under limited, targeted exploitation,” the search giant…
Watering Hole Attack Was Used to Target Florida Water Utilities
Watering Hole Attack Was Used to Target Florida Water Utilities | IT Security News 20. May 2021 This article has been indexed from The Hacker News An investigation undertaken in the aftermath of the Oldsmar water plant hack earlier this year has revealed that an infrastructure contractor in the U.S. state of Florida hosted malicious code on…
Ireland’s Health Services hit with $20 million ransomware demand
Ireland’s health service, the HSE, says they are refusing to pay a $20 million ransom demand to the Conti ransomware gang after the hackers encrypted computers and disrupted health care in the country. Ireland’s Health Service Executive (HSE), the country’s publicly funded healthcare system, shut down all of their IT systems on Friday after suffering a…
Rapid7 source code, credentials accessed in Codecov supply-chain attack
US cybersecurity firm Rapid7 has disclosed that some source code repositories were accessed in a security incident linked to the supply-chain attack that recently impacted customers of the popular Codecov code coverage tool. The computer and network security company has already notified a “small subset of customers” potentially impacted by this breach to take measures…
FBI’s IC3 Logs 1M Complaints in 14 Months
The FBI’s IC3 reports COVID-related scams and an increase in online retail may be behind the upswing in complaints. The FBI’s Internet Crime Complaint Center (IC3) has logged one million complaints related to online scams in the last 14 months, bringing the IC3 to a total of six million complaints logged. For context, the agency…
Live Webinar | Considerations for Building Your Cybersecurity Strategy in 2021 and BeyondWebinar.
Thank you for registering with ISMG Complete your profile and stay up to date Title LevelAnalytics/Architecture/EngineeringAttorney / General Counsel / CounselAVPBoard of DirectorC – levelC Level – OtherCCOCEO / PresidentCFOChairpersonCIOCISO / CSOCISO/CSO/CIOCOOCROCTODirectorEVP / SVP / FVPHeadHealthcare ProfessionalManager / SupervisorPartnerSpecialist/OtherStaffVP–Other Title Level– Job FunctionAnti-Money Laundering (AML)AuditBSABusiness Continuity/Disaster RecoveryBusiness DevelopmentCashier / Customer Service / AdministrativeClinical Healthcare ProfessionalCloud…
Colonial Pipeline CEO Confirms $4.4 Million Ransom Payment
Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime , Governance & Risk Management ‘It Was the Right Thing to Do for the Country’ Doug Olenick (DougOlenick) • May 19, 2021 Colonial Pipeline CEO Joseph Blount (Photo: Colonial Pipeline Co.) Colonial Pipeline Co.’s CEO, Joseph Blount, said Wednesday that he authorized…