For Maximum Resiliency, Unleash Chaos Monkeys

For Maximum Resiliency, Unleash Chaos Monkeys

Governance & Risk Management , IT Risk Management , Security Operations Opening RSA Conference Keynote Speeches Highlight Tactics for Sustainable Resiliency Mathew J. Schwartz (euroinfosec) • May 17, 2021     Could the theme of this year’s RSA Conference be anything other than resiliency? See Also: Webinar | Software Security: Prescriptive vs. Descriptive …

Colonial Pipeline Scheduling System Down Days After Re-Opening

Colonial Pipeline Scheduling System Down Days After Re-Opening

The nation’s largest oil pipeline is having issues with its scheduling system for future shipments. Colonial Pipeline’s network was down Tuesday just days after the pipeline reopened from a week-long shutdown. Last week’s cyberattack pushed gas prices to a seven-year high and caused fuel shortages. See more stories on Insider’s business page. Colonial Pipeline is having…

Magecart Skimming Tactics Evolve – DataBreachToday

Magecart Skimming Tactics Evolve – DataBreachToday

Malwarebytes Describes Updated Attack Techniques Prajeet Nair (@prajeetspeaks) • May 18, 2021     Magecart Group 12, known for skimming payment cards from e-commerce websites using JavaScript skimmers, is using an updated attack technique to gain remote administrative access to sites that run an older version of Adobe’s Magento software, according to an analysis by…

Bizarro: a banking Trojan full of nasty tricks – Malwarebytes Labs

Bizarro: a banking Trojan full of nasty tricks – Malwarebytes Labs

Unfortunately for you, Bizarro malware is a banking Trojan that comes with a bag of tricks and a versatile backdoor. Researchers have discovered a new banking Trojan that has been found targeting customers of European and South American banks. They have dubbed the new Trojan Bizarro. How does Bizarro spread? The Bizarro malware spreads via…

For Maximum Resiliency, Unleash Chaos Monkeys

For Maximum Resiliency, Unleash Chaos Monkeys

Governance & Risk Management , IT Risk Management , Security Operations Opening RSA Conference Keynote Speeches Highlight Tactics for Sustainable Resiliency Mathew J. Schwartz (euroinfosec) • May 17, 2021     Could the theme of this year’s RSA Conference be anything other than resiliency? See Also: Live Webinar | Software Security: Prescriptive vs. Descriptive …

CVE-2020-25709 – Alert Detail – Security Database

CVE-2020-25709 – Alert Detail – Security Database

Executive Summary This vulnerability is currently undergoing analysis and not all information is available. Please check back soon to view the completed vulnerability summary Informations Name CVE-2020-25709 First vendor Publication 2021-05-18 Vendor Cve Last vendor Modification 2021-05-18 Security-Database Scoring CVSS v3 Cvss vector : N/A Overall CVSS Score NA Base Score NA Environmental Score NA…

UK govt seeks advice on defending against supply-chain cyberattacks

UK govt seeks advice on defending against supply-chain cyberattacks

Today, the UK government has announced a call for advice on defending against software supply-chain attacks and ways to strengthen IT Managed Service Providers (MSPs) across the country. The move comes after last week when President Biden had issued an executive order to increase cybersecurity defenses across the U.S. The government’s invitation to provide feedback that will be open for…

Insurer AXA hit by ransomware after dropping support for ransom payments

Insurer AXA hit by ransomware after dropping support for ransom payments

Branches of insurance giant AXA based in Thailand, Malaysia, Hong Kong, and the Philippines have been struck by a ransomware cyber attack. As seen by BleepingComputer yesterday, the Avaddon ransomware group claimed on their leak site that they had stolen 3 TB of sensitive data from AXA’s Asian operations. Additionally, BleepingComputer observed an ongoing Distributed Denial of Service (DDoS)…

Colonial Pipeline paid $5 million in ransom to DarkSide ransomware group

Colonial Pipeline paid $5 million in ransom to DarkSide ransomware group

Colonial Pipeline paid $5 million to the DarkSide ransomware group to restore operations within hours after a ransomware attack paralysed fuel supplies across the U.S. eastern seaboard, Bloomberg has revealed. Last Friday, Colonial Pipeline announced via a press release that it suffered a ransomware attack and had to take certain systems offline to contain the…