US Formally Attributes SolarWinds Attack to Russian Intelligence Agency
Treasury Department slaps sanctions on IT security firms that it says supported Russia’s Foreign Intelligence Service carry out the attacks.
Source: Dark
[...]
AuthorJai Vijayan Contributing Writer
Malicious PowerShell Use, Attacks on Office 365 Accounts Surged in Q4
There was also a sharp increase in overall malware volumes in the fourth quarter of 2020, COVID-19 related attack activity, and mobile malware,
[...]
DNS Vulnerabilities Expose Millions of Internet-Connected Devices to Attack
Researchers uncover a fresh set of nine vulnerabilities in four TCP/IP stacks that are widely used in everything from powerful servers and firewalls
[...]
New Malware Downloader Spotted in Targeted Campaigns
Saint Bot is being used to drop stealers on compromised systems but could be used to deliver any malware.
Source: Dark Reading
[...]
Zoom Joins Microsoft Teams on List of Enterprise Tools Hacked at Pwn2Own
White-hat hacking event shows yet again why there’s no such thing as foolproof security against modern attacks.
Source: Dark Reading – Threat
[...]
Attackers Actively Seeking, Exploiting Vulnerable SAP Applications
Analysis of threat activity in mission-critical environments prompts CISA advisory urging SAP customers to apply necessary security patches and updates.
Source: Dark
[...]
SolarWinds Experimenting With New Software Build System in Wake of Breach
CISO of SolarWinds now has complete autonomy to stop product releases if security concerns exist, CEO says.
Source: Dark Reading – Threat
[...]
Chinese APT Targets Telcos in 5G-Related Cyber-Espionage Campaign
Telemetry suggests that threat actor behind Operation Dianxun is Mustang Panda, McAfee says.
Source: Dark Reading – Threat Intelligence – Chinese APT
[...]
F5 Networks Urges Customers to Update to New Versions of Its App Delivery Tech
F5 BIG-IP and BIG-IQ have multiple critical vulnerabilities that enable attackers to completely compromise systems.
Source: Dark Reading – Threat Intelligence –
[...]
Malware Operator Employs New Trick to Upload its Dropper into Google Play
Check Point researchers recently discovered the Clast82 dropper hidden in nine legitimate Android utility apps.
Source: Dark Reading – Threat Intelligence –
[...]