Women in Cybersecurity: Why Diversity Matters

CNA Financial, one of the largest insurance companies in the US, reportedly paid hackers $40 million after a ransomware attack blocked access to the company’s network and stole its data, according to a report from Bloomberg’s Kartikay Mehrotra and William Turton.  CNA first announced the hack in late March, stating that it had seen a…

Cyberwarfare / Nation-State Attacks , Forensics , Fraud Management & Cybercrime Hackers Used Backdoor to Access Production Environment Akshaya Asokan (asokan_akshaya) • March 17, 2021     Email security vendor Mimecast, which was targeted by the SolarWinds supply chain hack in January, reports in a Tuesday update that the hackers used the “Sunburst” backdoor as…

Background On July 2, 2021, Kaseya, an IT Management software firm, disclosed a security incident impacting their on-prem version of Kaseya VSA software. Kaseya VSA is a cloud-based MSP platform that allows service providers to perform patch management, backups, and client monitoring for their customers. As per Kaseya, the majority of their customers that rely…

Cybercrime , Cybercrime as-a-service , DDoS Protection Matthew Gatrel Offered Subscription-Based Computer Attack Platforms Prajeet Nair (@prajeetspeaks) • September 19, 2021     An Illinois man has been found guilty of running subscription-based distributed denial of service attacks that flood targeted computers with information and prevent them from being able to access the internet, reports…

The U.S. Cybersecurity and Infrastructure Security Agency is warning of active exploitation attempts that leverage the latest line of “ProxyShell” Microsoft Exchange vulnerabilities that were patched earlier this May, including deploying LockFile ransomware on compromised systems. Tracked as CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207, the vulnerabilities enable adversaries to bypass ACL controls, elevate privileges on the Exchange…

Polish intelligence services and those of allied states have “unanimously” agreed that a cyberattacks against the emails of top Polish officials and politicians “originated on the territory of the Russian Federation”, Polish deputy prime minister Jarosław Kaczyński said in a statement Friday. The attack was meant to harm, Polish society” and to “destabilise” the country,…