President Joe Biden plans to nominate Chris Inglis to serve as the country’s first national cyber director, Jen Easterly to direct the Cybersecurity and Infrastructure Security Agency, and additional Homeland Security Department leaders. Lawmakers of the Cyberspace Solarium Commission, where both nominees delivered input, praised their selection Monday. Inglis, a former deputy director of the…
Cybersecurity Microsoft patches new Exchange CVEs, credits NSA with discovery By Justin Katz Apr 13, 2021 Microsoft on Tuesday released patches for two newly discovered vulnerabilities in on-premise Exchange servers, separate from zero-day exploits found in March, and the company is crediting the National Security Agency with identifying the flaws. “These new…
Xinhua file photos of Russian President Vladimir Putin (L) and U.S. President Joe Biden U.S. President Joe Biden on Tuesday called on Russia to de-escalate its tensions with Ukraine in his phone call with Russian President Vladimir Putin, the White House said. The president voiced concerns over the sudden Russian military build-up in Crimea and…
Popular TCP/IP stacks are affected by a series of Domain Name System (DNS) vulnerabilities that could be exploited to take control of impacted devices, researchers with IoT security firm Forescout reveal. Collectively called NAME:WRECK and identified in the DNS implementations of FreeBSD, Nucleus NET, IPnet, and NetX, the flaws could also be abused to perform…
Microsoft today released updates to plug at least 110 security holes in its Windows operating systems and other products. The patches include four security fixes for Microsoft Exchange Server — the same systems that have been besieged by attacks on four separate (and zero-day) bugs in the email software over the past month. Redmond also…
The Russian military has built up its military presence in Crimea and along the border with Ukraine, raising concerns among the U.S. and its allies of a potential conflict. Russia has stationed the highest number of troops along Ukraine’s border since 2014, and leaders there have been mulling how to respond to the moves from…
Microsoft today patched 114 CVEs to address the Exchange Server flaws, more than 50 remote code execution vulnerabilities, and one zero-day. Microsoft today issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA),…
The International Atomic Energy Agency (IAEA) has said it will work with Japan “before, during and after” the country’s plan to release one million tonnes of contaminated water from the destroyed Fukushima nuclear plant into the sea. The director general Rafael Mariano Grossi told BBC World News that whatever option was taken it was about…
3rd Party Risk Management , Account Takeover Fraud , Application Security & Online Fraud Tom Kellermann of VMware Carbon Black on Fraud Trends and Essential Defenses Tom Field (SecurityEditor) • April 13, 2021 Tom Kellermann, head of cybersecurity strategy, VMware Carbon Black Brokerage account takeover, supply chain attacks,…
The US Capitol police officer Billy Evans, who was killed in a recent attack, was “an amazing guy”, his life-long friend Jason LaForest has said. William “Billy” Evans, who had been a member of the Capitol Police for 18 years, died when a vehicle was rammed into officers at the Capitol. Mr LaForest told BBC…
