A previously undocumented backdoor malware, dubbed PortDoor, is being used by a probable Chinese advanced persistent threat actor (APT) to target the Russian defense sector, according to researchers. The Cybereason Nocturnus Team observed the cybercriminals specifically going after the Rubin Design….
Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management Agency Says Exploits Pose ‘Unacceptable Risk’ Scott Ferguson (Ferguson_Writes) • April 21, 2021 The U.S. Cybersecurity and Infrastructure Security Agency has issued an emergency directive requiring executive branch agencies to mitigate by Friday the risks posed by a zero-day vulnerability…
Executive Summary Informations Name CVE-2021-2293 First vendor Publication 2021-04-22 Vendor Cve Last vendor Modification 2021-04-22 Security-Database Scoring CVSS v3 Cvss vector : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Overall CVSS Score 4.9 Base Score 4.9 Environmental Score 4.9 impact SubScore 3.6 Temporal Score 4.9 Exploitabality Sub Score 1.2 Attack Vector Network Attack Complexity Low Privileges Required High User Interaction…
Microsoft is announcing that it has entered into a definitive agreement to acquire RiskIQ, a leader in global threat intelligence and attack surface management, to help their shared customers build a more comprehensive view of the global threats to their businesses, better understand vulnerable internet-facing assets, and build world-class threat intelligence. This was made in…
Microsoft rolled out Patch Tuesday updates for the month of July with fixes for a total of 117 security vulnerabilities, including nine zero-day flaws, of which four are said to be under active attacks in the wild, potentially enabling an adversary to take control of affected systems. Of the 117 issues, 13 are rated Critical,…
The US National Security Agency (NSA) and the Cybersecurity and Infrastructure Security Agency (CISA) have released Kubernetes Hardening Guidance, a 59-page technical report detailing threats to Kubernetes environments. Kubernetes is a popular open source software that automates the deployment, scaling, and management of applications run in containers, making it an attractive target for malicious actors….
Fraud Management & Cybercrime , Next-Generation Technologies & Secure Development , Ransomware Before Labor Day, Agency Cites Recent Attacks Centered on Holiday Weekends Doug Olenick (DougOlenick) • September 1, 2021 Citing damaging ransomware attacks that it, along with the FBI, has observed over recent holidays, the Cybersecurity and Infrastructure Security Agency issued an…
