Zero-day vulnerabilities in Microsoft Exchange Server

A North Korean-backed hacking group has targeted the defense industry with custom backdoor malware dubbed ThreatNeedle since early 2020 with the end goal of collecting highly sensitive information. This espionage campaign affected organizations from more than a dozen countries and was coordinated by DPRK-backed state hackers tracked as Lazarus Group. The attackers used COVID19-themed spear-phishing…

SAP partners with Onapsis to mitigate active threats against unprotected SAP applications – IT Security News 8. April 2021 SAP and Onapsis jointly released a cyber threat intelligence report providing actionable information on how malicious threat actors are targeting and potentially exploiting unprotected mission-critical SAP applications. The companies have worked in close partnership with the…

Endpoint Security , Fraud Management & Cybercrime , Fraud Risk Management Both Companies Confirm ‘Advanced Discussions’; Avast’s Market Valuation Is $7.2 Billion Mathew J. Schwartz (euroinfosec) • July 15, 2021     Avast’s headquarters in Prague (Photo: Avast) Security software firm NortonLifeLock says it is in discussions to acquire Avast, a rival security firm known…

Cybercrime , Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime Experts Discuss Impact of ‘Transformational Moment’ Scott Ferguson (Ferguson_Writes) • June 17, 2021     U.S. President Joe Biden and Russian President Vladimir Putin meeting in Geneva (Photo: Ministry of Foreign Affairs of Russia via Twitter/CC) After U.S. President Joe Biden and Russian President…

Indonesian authorities have found no evidence that the country’s main intelligence service’s computers were compromised after a US-based private cybersecurity company alerted them of a suspected breach of its internal networks by a Chinese hacking group, an official said. The Insikt Group, the threat research division of Massachusetts-based Recorded Future, said it discovered the…

Four states have been chosen by the National Governors Association (NGA) for its 2021 Policy Academy to Advance Whole-of-State Cybersecurity.  Kansas, Missouri, Montana, and Washington have all been selected by the NGA Center for Best Practices to work directly with the NGA on cybersecurity governance, workforce development, and government partnership policies.  “Representatives of the four states will…