North Korean Group Targets Security Researchers

North Korean Group Targets Security Researchers

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Malware as-a-Service Google: Attackers Leverage Social Media Accounts Akshaya Asokan (asokan_akshaya) • April 2, 2021     Screenshot of the fake “SecuriElite” website (Source: Google TAG) A North Korean government-backed threat group that was detected targeting security researchers in January is once again staging a…

Myanmar: ‘We are in danger of seeing a civil war’

Myanmar: ‘We are in danger of seeing a civil war’

The ongoing unrest in Myanmar is in danger of spiralling into an “all-out civil war”, a human rights group has warned. Hundreds of people, including children, have been killed since the military seized power in February. The coup triggered mass protests that have been met with a violent response from the authorities. “The military regime…

North Korean Group Targets Security Researchers

North Korean Group Targets Security Researchers

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Malware as-a-Service Google: Attackers Leverage Social Media Accounts Akshaya Asokan (asokan_akshaya) • April 2, 2021     Screenshot of the fake “SecuriElite” website (Source: Google TAG) A North Korean government-backed threat group that was detected targeting security researchers in January is once again staging a…

CVE-2021-25156

CVE-2021-25156

A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.

Ubiquiti Acknowledges Extortion Attempt – BankInfoSecurity

Ubiquiti Acknowledges Extortion Attempt – BankInfoSecurity

Company Called Out by Whistleblower for Attack Response Doug Olenick (DougOlenick) • April 2, 2021     Internet of things vendor Ubiquiti revealed in a security notice Wednesday that an attacker had attempted to extort money from the company following a December 2020 cyber incident – a fact not mentioned in the company’s Jan. 11…

Wipro acquires Melbourne-based Ampion – Services

Wipro acquires Melbourne-based Ampion – Services

Global systems integrator Wipro has acquired Melbourne-based managed services provider Ampion for an undisclosed sum. Based in Melbourne, Ampion specialises in cyber security, DevOps and quality engineering services. The company was formed last year following the merger of MSPs Revolution IT and Shelde. Wipro said adding Ampion’s offerings in engineering transformation, DevOps and security consulting…

CVE-2020-9149 – Alert Detail – Security Database

CVE-2020-9149 – Alert Detail – Security Database

Executive Summary Informations Name CVE-2020-9149 First vendor Publication 2021-04-01 Vendor Cve Last vendor Modification 2021-04-01 Security-Database Scoring CVSS v3 Cvss vector : N/A Overall CVSS Score NA Base Score NA Environmental Score NA impact SubScore NA Temporal Score NA Exploitabality Sub Score NA   Calculate full CVSS 3.0 Vectors scores Security-Database Scoring CVSS v2 Cvss…

DeepDotWeb Portal Administrator Pleads Guilty

DeepDotWeb Portal Administrator Pleads Guilty

Cybercrime , Fraud Management & Cybercrime , Fraud Risk Management Faces Up to 20 Years in Prison for Money Laundering Conspiracy Prajeet Nair (@prajeetspeaks) • April 1, 2021     The shuttered DeepDotWeb portal An Israeli citizen who served as the administrator of the now-shuttered DeepDotWeb portal that connected internet users with darknet marketplaces has…