Governance & Risk Management , IT Risk Management , Patch Management Flaw Allows Unauthorized Users to Send Specially Crafted Requests Prajeet Nair (@prajeetspeaks) • February 25, 2021 Security firm Positive Technologies says more than 6,000 VMware vCenter devices worldwide that are accessible via the internet contain a critical remote code execution vulnerability. VMware…
Researchers: ‘Jian’ Hacking Tool Targeted Zero-Day Flaw in Windows Scott Ferguson (Ferguson_Writes) • February 22, 2021 A Chinese hacking group reportedly “cloned” and deployed a zero-day exploit developed by the U.S. National Security Agency’s Equation Group before Microsoft patched the Windows vulnerability that was being exploited in 2017, according to an analysis published…
Cybercrime , Endpoint Security , Fraud Management & Cybercrime Called Serious Threat, But Has Yet to Take Malicious Action Doug Olenick (DougOlenick) • February 23, 2021 A previously undetected malware variant has infected almost 30,000 Apple Macs. But researchers so far have not seen it deliver any malicious payloads to compromised endpoints, according…
The New York Department of Financial Services (“NYDFS”) recently released its Cyber Insurance Risk Framework (the “Framework”), which provides best practices for managing cyber insurance risk. The stated goal of the Framework is to grow “a robust cyber insurance market that maintains the financial stability of insurers and protects insureds.” While the Framework is directed…
Greece is hoping European countries will adopt a Covid-19 vaccine certificate system to make tourism easier during the summer. A digital vaccination certificate would make travel smoother, Akis Skertsos, deputy minister to Greece’s prime minister explained. He told BBC World News: “We don’t think that this is discriminatory at all. Restrictions are already in place…
Attackers are looking to exploit critical VMware vCenter Server RCE flaw, patch ASAP! | IT Security News 25. February 2021 The day after VMware released fixes for a critical RCE flaw (CVE-2021-21972) found in a default vCenter Server plugin, opportunistic attackers began searching for publicly accessible vulnerable systems. We’ve detected mass scanning activity targeting vulnerable…
Cryptocurrency Fraud , Fraud Management & Cybercrime , Legislation & Litigation $70 Million Allegedly Lost to Schemes Such as Bitcoiin2Gen Touted by Steven Seagal Mathew J. Schwartz (euroinfosec) • February 25, 2021 Bitcoiin2Gen in 2018 said “Zen Master Steven Seagal” had become its “brand ambassador.” If there’s anything to put the final nail…
Critical VMware vCenter Server Flaw Can Expose Organizations to Remote Attacks | IT Security News 24. February 2021 VMware on Tuesday informed customers that its vCenter Server product is affected by a critical vulnerability that can be exploited by an attacker to execute commands with elevated privileges. read more Like this: Like Loading… Related Tags:…
The former Australian prime minister Kevin Rudd has backed talks between Myanmar’s military and Indonesia’s foreign minister Retno Marsudi. The meeting agreed by the Association of Southeast Asian Nations (Asean) was criticised by some in Myanmar, also known as Burma, because it was seen to give legitimacy to the military regime. But Mr Rudd told…
(Pocket-lint) – The second major hotfix for Cyberpunk 2077 has been delayed to late March. CD Projekt Red claims this is due to the recent, major cyber attack on its IT infrastructure. Posting on Twitter, the developer cites the ransomware attack on its systems and theft of code as the reason the promised patch 1.2…
