InfoSec Handlers Diary Blog

InfoSec Handlers Diary Blog

Ransomware attacks continue to be in the headlines everywhere, and are also an almost weekly reoccurring subject in the SANS Newsbites. As useful as many of the reports are that security firms and researchers publish on the subject, they often focus heavily on one particular incident or type of ransomware, and the associated “indicators of…

Sex trafficking lawsuit takes step closer to Trump loyalist congressman

Sex trafficking lawsuit takes step closer to Trump loyalist congressman

Orlando: The former confidant of Representative Matt Gaetz pleaded guilty on Monday (Tuesday AEST) in federal court in Florida to a range of charges, including sex trafficking a 17-year-old girl, creating an ominous development for the firebrand right-wing congressman. Joel Greenberg, the former confidant of associate of Gaetz, made the plea as part of a…

Irish Healthcare Sector Was Hit by 2 Ransomware Attacks

Irish Healthcare Sector Was Hit by 2 Ransomware Attacks

Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime , Governance & Risk Management Department of Health and Health Service Executive Both Were Targeted Tony Morbin (@tonymorbin) • May 17, 2021     Irish Department of Health headquarters Two healthcare agencies in Ireland suffered ransomware attacks last week that appear to be related,…

Insurer AXA hit by ransomware after dropping support for ransom payments

Insurer AXA hit by ransomware after dropping support for ransom payments

Branches of insurance giant AXA based in Thailand, Malaysia, Hong Kong, and the Philippines have been struck by a ransomware cyber attack. As seen by BleepingComputer yesterday, the Avaddon ransomware group claimed on their leak site that they had stolen 3 TB of sensitive data from AXA’s Asian operations. Additionally, BleepingComputer observed an ongoing Distributed Denial of Service (DDoS)…

CVE-2021-24295

CVE-2021-24295

It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The update_log function in lib/Cleantalk/ApbctWP/Firewall/SFW.php included a vulnerable query that could be injected via….

DarkSide ransomware crims quit as Colonial Pipeline attack backfires – Security

DarkSide ransomware crims quit as Colonial Pipeline attack backfires – Security

The attack on the Colonial Pipeline fuel distribution system in the United States is causing repercussions for the operators of the Darkside ransomware group behind it, sparking fear among other cybercriminals that they will be targeted by law enforcement. Security vendor Intel471 said it had obtained an announcement from the DarkSide gang, posted to the…

Cisco Snaps Up Kenna Security for Vulnerability Management – Security news

Cisco Snaps Up Kenna Security for Vulnerability Management – Security news

Cisco Snaps Up Kenna Security for Vulnerability ManagementCisco is set to acquire privately held Kenna Security in a deal designed to expand its SecureX platform with vulnerability management capabilities.Santa Clara-based Kenna Security provides risk-based vulnerability management capabilities alongside vulnerability intelligence to help organizations rapidly identify, prioritize and remediate cyber-risks.Cisco claimed the technology is increasingly important…

Joel Greenberg Pleads Guilty, Agrees to Cooperate Against Gaetz

Joel Greenberg Pleads Guilty, Agrees to Cooperate Against Gaetz

Former Florida tax official and Matt Gaetz associate Joel Greenberg pleaded guilty to 6 counts on Monday. He appeared before a judge and pleaded guilty to sex-trafficking, wire fraud, identity theft, stalking, and conspiracy. Greenberg also agreed to cooperate fully with the government in any related cases. See more stories on Insider’s business page. The…