Malaysia Airlines suffers data security ‘incident’ spanning nine years

Malaysia Airlines suffers data security ‘incident’ spanning nine years

Malaysia Airlines suffers data security ‘incident’ spanning nine years | IT Security News Latest topics for ZDNet in Security 2. March 2021 Security breach compromises personal data of the airline’s frequent flyer programme Enrich, including members’ contact details and date of birth, and reportedly involved a third-party IT service provider in an “incident” stretching June…

Jailbreak Tool ‘unc0ver’ 6.0.0 Released With iOS 14.3 Compatibility

Jailbreak Tool ‘unc0ver’ 6.0.0 Released With iOS 14.3 Compatibility

MacRumors: Mac News and Rumors – Front Page 28. February 2021 The team behind the “unc0ver” jailbreaking tool for iOS has released version 6.0.0 of its software, which can allegedly be used to jailbreak any device running iOS 11.0 through iOS 14.3 using a kernel vulnerability. The unc0ver website describes how the tool has been…

Coverage Advisory for Zero-day Exploits Related to Microsoft

Coverage Advisory for Zero-day Exploits Related to Microsoft

Background Microsoft has reported multiple exploits being used to attack on-premises versions of Microsoft Exchange Server in limited and targeted attacks. In the attacks observed, the threat actor used these vulnerabilities to access on-premises Exchange servers which enabled access to email accounts, and allowed installation of additional malware to facilitate long-term access to victim environments….

Chinese hackers targeted India’s power through malware amid border tension: Report

Chinese hackers targeted India’s power through malware amid border tension: Report

The report has led to raising suspicion whether last year’s massive power outage in Mumbai was a result of the online intrusion Washington: Amidst the tense border tension between India and China, a Chinese government-linked group of hackers targeted India’s critical power grid system through malware, a US company has said in its latest study,…

Microsoft says China hacked Exchange email product

Microsoft says China hacked Exchange email product

Microsoft said that its Exchange email product had been compromised by Chinese hackers. The company said it believes the group, which it named “Hafnium,” was supported by the Chinese state. Microsoft also released security updates to combat the hacks. Visit the Business section of Insider for more stories. Microsoft announced Tuesday that its Exchange email…

Max level vulnerability found in Logix PLCs

Max level vulnerability found in Logix PLCs

A new vulnerability discovered in various Rockwell Automation programmable logic controllers (PLC) has received a 10 out of 10 risk score, the highest possible on the CVSS vulnerability scale. The new vulnerability is being tracked as CVE-2021-22681. Attackers can abuse this flaw in the Logix Designer 5000 software to gain the secret cryptographic key, which…

Microsoft Issues Emergency Patch as Chinese Hackers Exploiting Exchange Server Flaws

Microsoft Issues Emergency Patch as Chinese Hackers Exploiting Exchange Server Flaws

Microsoft Issues Emergency Patch as Chinese Hackers Exploiting Exchange Server Flaws | IT Security News Sponsors Endpoint Cybersecurity www.endpoint-cybersecurity.com – Consulting in building your security products– Employee awareness training– Security tests for applications and pentesting… and more. Daily Summary Patreon Categories CategoriesSelect Category(ISC)2 Blog  (323)(ISC)2 Blog infosec  (13)(ISC)² Blog  (318)2020-12-08 – Files for an ISC diary (recent Qakbot…