News

Use This One-Click Mitigation Tool from Microsoft to Prevent Exchange Attacks | IT Security News 16. March 2021 Microsoft on Monday released a one-click mitigation software that applies all the necessary countermeasures to secure vulnerable environments against the ongoing widespread ProxyLogon Exchange Server cyberattacks.Called Exchange On-premises Mitigation Tool (EOMT), the PowerShell-based script serves to mitigate against current…

Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management ‘Unsophisticated’ Code Has Scant Resemblance to WannaCry Namesake, Researchers Say Mathew J. Schwartz (euroinfosec) • March 16, 2021     DearCry ransomware appends “.CRYPT” to forcibly encrypted files. (Source: Sophos) Fresh ransomware targeting as-yet-unpatched on-premises Exchange servers appears to have been rushed…

Adversaries are deploying DearCry ransomware on victim systems after hacking into on-premise Microsoft Exchange servers that remain unpatched, Microsoft acknowledged late Thursday. “Microsoft observed a new family of human operated ransomware attack customers,” Microsoft Security Program Manager Phillip Misner tweeted at 9:19 p.m. ET Thursday. “Human operated ransomware attacks are utilizing the Microsoft Exchange vulnerabilities…

Cybersecurity company Lookout, Inc. has announced the acquisition of CipherCloud as it seeks to develop an integrated endpoint-to-cloud security solution. The deal will enable Lookout to secure CipherCloud solutions as part of its product portfolio. This includes solutions that span developing SASE categories, including Cloud Access Security Broker (CASB), Zero-Trust Network Access (ZTNA), Secure Web…

Microsoft stands to receive nearly a quarter of Covid relief funds destined for US cybersecurity defenders, angering some lawmakers who don’t want to increase funding for a company whose software was recently at the heart of two big hacks. Congress allocated the funds at issue in the Covid relief bill after two enormous cyber attacks…

A lapsed domain registration tied to WeLeakInfo, a wildly popular service that sold access to more than 12 billion usernames and passwords from thousands of hacked websites, “let someone plunder and publish account data on 24,000 customers who paid to access the service with a credit card,” reports Krebs on Security. This comes after the…

Application Security , Breach Notification , COVID-19 Experts Say Increase Owes to Lack of Funding, Virtual Learning Doug Olenick (DougOlenick) • March 15, 2021     U.S. public schools faced a record number of cyber incidents in 2020, with over 400 attacks reported. This led to a spike in school cancellations, as IT staff members…

Microsoft stands to receive nearly a quarter of Covid relief funds destined for US cybersecurity defenders, sources told Reuters, angering some lawmakers who don’t want to increase funding for a company whose software was recently at the heart of two big hacks. Congress allocated the funds at issue in the COVID relief bill signed on…

Critical Infrastructure Security , Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime PM Boris Johnson Expected to Present National Security Review on Tuesday Prajeet Nair (@prajeetspeaks) • March 15, 2021     UK to build “a cyber ecosystem fit for the future.” Source: UK Ministry of Defense Ahead of presenting a long-term review of…