SEC News

What's new arround internet

Last one

Src	Date (GMT)	Titre	Description	Tags	Stories	Notes
	2021-05-27 08:32:48	New Iranian Group \'Agrius\' Launches Destructive Cyberattacks on Israeli Targets (lien direct)	Over the past year, an Iran-linked threat actor named Agrius has been observed launching destructive attacks on Israeli targets, under the disguise of ransomware attacks, according to endpoint security company SentinelOne.	Threat Ransomware
	2021-05-27 03:48:25	Code Execution Flaw in Checkbox Survey Exploited in the Wild (lien direct)	A Checkbox Survey vulnerability that could allow a remote attacker to execute arbitrary code without authentication is being exploited in the wild, the CERT Coordination Center (CERT/CC) at Carnegie Mellon University warns.	Vulnerability
	2021-05-26 19:29:45	US Exchanges Offer a Rich Potential Target for Hackers (lien direct)	Cyberattacks have long been seen as a threat to financial markets, but worries are becoming even more acute following a US pipeline hack that set off a public panic and forced the company to pay a ransom. Financial exchanges that manage daily transactions of tens or hundreds of billions of dollars are an appealing target for hackers.	Threat Hack
	2021-05-26 15:13:27	Virtual Event Keynote: John Lambert, Microsoft Threat Intelligence Center (lien direct)	John Lambert, GM at the Microsoft Threat Intelligence Center, will provide a keynote at SecurityWeek's Threat Intelligence Summit on May 26th at 12PM ET.	Threat
	2021-05-26 14:57:13	Salt Security Raises $70 Million in Series C Funding (lien direct)	Palo Alto, California-based API protection company Salt Security today announced that it raised $70 million in Series C funding, which brings the total raised to date to $131 million.
	2021-05-26 14:29:30	VMware Urges Customers to Immediately Patch Critical vSphere Vulnerability (lien direct)	VMware has urged customers to immediately patch a critical vulnerability affecting vCenter Server, the management interface for vSphere environments. The vulnerability, tracked as CVE-2021-21985, was reported to VMware by Ricter Z of 360 Noah Lab and it has been patched in versions 6.5, 6.7 and 7.0 of vCenter Server.	Vulnerability
	2021-05-26 14:26:46	The VC View: Identity = Zero Trust for Everything (lien direct)	Identity very much seems to be an acquired taste… Most everyone's first experience with identity comes down to usernames and passwords. And that's enough for most users, “just let me get past this screen so I can do what I'm trying to do.”
	2021-05-26 12:57:57	\'World\'s Leading Bank Robbers\': North Korea\'s Hacker Army (lien direct)	Nuclear-armed North Korea is advancing on the front lines of cyberwarfare, analysts say, stealing billions of dollars and presenting a clearer and more present danger than its banned weapons programmes.
	2021-05-26 12:13:56	Half-Double: Google Researchers Find New Rowhammer Attack Technique (lien direct)	A team of researchers from Google has identified a new Rowhammer attack technique that works against recent generations of dynamic random-access memory (DRAM) chips.
	2021-05-26 11:24:56	Google Patches 32 Vulnerabilities With Release of Chrome 91 (lien direct)	Google on Tuesday announced the release of Chrome 91 to the stable channel. The latest update patches a total of 32 vulnerabilities. Of the addressed issues, 21 vulnerabilities were discovered by external researchers, including 8 high-severity bugs, 8 medium-severity flaws, and 5 low-severity security holes.
	2021-05-26 10:31:30	Rising Cyberattacks in West Highlight Vulnerabilities (lien direct)	A series of high-profile cyberattacks on targets in the West have highlighted the vulnerability of companies and institutions, making the issue a higher public priority but with no easy solution.	Vulnerability
	2021-05-26 00:49:35	Belgium Interior Ministry Targeted in Cyber Attack (lien direct)	The Belgian interior ministry has found itself the target of "sophisticated" cyber espionage, a spokesman told RTBF public television on Tuesday.
	2021-05-25 19:44:54	The Rise of Continuous Attack Surface Management (lien direct)	In the merry-go-round world of InfoSec technologies and “what's old is new again,” this year we should include Attack Surface Management with a dash of Continuous.
	2021-05-25 19:32:16	Hack Prompts New Security Regulations for US Pipelines (lien direct)	The federal government will issue cybersecurity regulations in the coming days for U.S. pipeline operators following a ransomware attack that led to fuel shortages across much of the Eastern Seaboard.
	2021-05-25 17:33:58	Email Security Firm Tessian Raises $65 Million at $500 Million Valuation (lien direct)	Tessian, an email security company that focuses on human error, today announced that it raised $65 million in Series C funding. The company has raised $123.7 million in total and its valuation is now $500 million.
	2021-05-25 15:06:54	Gartner: Global Security Spending Will Reach $150 Billion in 2021 (lien direct)	Research and advisory giant Gartner predicts that global security and risk management spending will exceed $150 billion this year. The company forecasts that information security and risk management will grow by more than 12 percent in 2021. Spending in these segments increased by more than 6 percent in 2020.
	2021-05-25 14:25:33	OT Systems Increasingly Targeted by Unsophisticated Hackers: Mandiant (lien direct)	Unsophisticated threat actors - in many cases motivated by financial gain - have increasingly targeted internet-exposed operational technology (OT) systems, according to research conducted by Mandiant, FireEye's threat intelligence and incident response unit.	Threat
	2021-05-25 14:04:16	Bose Says Personal Information Compromised in Ransomware Attack (lien direct)	Bose Corporation last week started sending out breach notification letters to inform some individuals of personal data being compromised in a cyberattack identified on March 7.	Ransomware		★★★★★
	2021-05-25 13:04:49	Report Highlights Massive Scale of Automated Cyberattacks (lien direct)	Gartner first gave name to the Secure Access Service Edge (SASE) model, effectively defining it. SASE combines WAN and security as a cloud service.
	2021-05-25 12:53:42	Operating in the Shadows: US Cyber Command (lien direct)	If the Pentagon's Cyber Command launches an online attack and nobody knows about it, does it deter anyone? Many Americans are asking what the country's army of cyber warriors are doing after repeated attacks on US computer systems by Chinese, Russian and other hackers.
	2021-05-25 12:01:32	New Bluetooth Vulnerabilities Could Expose Many Devices to Impersonation Attacks (lien direct)	Researchers working for a French government agency have identified seven new Bluetooth vulnerabilities that could expose many devices to impersonation and other types of attacks.
	2021-05-25 11:37:55	Apple Patches macOS Big Sur Vulnerability Exploited by Malware (lien direct)	Apple on Monday announced that software updates for its desktop and mobile operating systems address tens of vulnerabilities, including a zero-day flaw in macOS Big Sur that has been exploited in attacks.	Malware Vulnerability
	2021-05-25 08:48:18	Cyberattacks: Bigger, Smarter, Faster (lien direct)	From paralysing the internet in Estonia to a $4.4-million ransom being paid last week after the shutdown of a major US pipeline, we take a look back at 15 years of cyberattacks.
	2021-05-25 04:00:02	Trend Micro Patches Vulnerabilities in Home Network Security Devices (lien direct)	Vulnerabilities identified by security researchers with Cisco's Talos unit in Trend Micro Home Network Security devices could be exploited to elevate privileges or achieve arbitrary authentication.
	2021-05-25 03:31:07	Hack, Disinform, Deny: Russia\'s Cybersecurity Strategy (lien direct)	Over the years, Moscow has faced numerous allegations of cyberattacks that resulted in multiple sanctions and the expulsion of its diplomats. The term "hacker" has almost become synonymous with Russia.
	2021-05-25 01:38:51	Russian to be Deported After Failed Tesla Ransomware Plot (lien direct)	A Russian man was sentenced Monday to what amounted to time already served and will be deported after pleading guilty to trying to pay a Tesla employee $500,000 to install computer malware at the company's Nevada electric battery plant in a bid to steal company secrets for ransom.	Ransomware Malware Guideline
	2021-05-24 18:10:01	Tulsa Computer System Hacks Stopped by Security Shutdown (lien direct)	Most residents of Tulsa are being prevented from paying their water bills after the city shut down its computer network as a security measure following an attempted ransomware attack, a city official said Friday.	Ransomware
	2021-05-24 17:32:14	QNAP Says Recently Patched Flaw Exploited in Qlocker Ransomware Attacks (lien direct)	Taiwanese network-attached storage (NAS) appliance manufacturer QNAP Systems has revealed that a vulnerability in its Hybrid Backup Sync software has been exploited in Qlocker ransomware attacks.	Ransomware Vulnerability
	2021-05-24 14:40:06	FBI: 16 Conti Ransomware Attacks Targeted Healthcare, First Responders in U.S. (lien direct)	The FBI says it has observed 16 Conti ransomware attacks that targeted healthcare and first responder networks in the United States over the past year.	Ransomware
	2021-05-24 14:14:26	Needle in the Haystack: The Inside Story of the Microsoft Exchange Hack (lien direct)		Hack
	2021-05-24 14:09:28	Ongoing Bitcoin Scams Demonstrate Power of Social Engineering Triggers (lien direct)	Bitcoin scams have soared over the last seven months. The surge started around October 2020, and the scams are continuing today.
	2021-05-24 13:46:29	Experts or \'Grifters\'? Little-Known Firm Runs Arizona Audit (lien direct)	In early March, a Boston-based vote-counting firm called Clear Ballot Group sent a bid to Arizona's state Senate to audit the 2020 presidential election results in Maricopa County.
	2021-05-24 13:18:10	U.S. Government Asks Victims of 2017 EtherDelta Hack to Come Forward (lien direct)	The U.S. government is hoping to obtain additional information on the 2017 hacker attack targeting the EtherDelta cryptocurrency trading platform and it has asked victims of the incident to come forward.	Hack
	2021-05-24 11:30:31	Android Apps Expose Sensitive Data Due to Misconfigured Third-Party Services (lien direct)	Researchers at cybersecurity firm Check Point discovered that many Android applications publicly expose sensitive user data through misconfigured third-party services.
	2021-05-24 11:08:52	Hacker Who Sold UPMC Employee Information Pleads Guilty (lien direct)	A Michigan man has pleaded guilty to hacking a University of Pittsburgh Medical Center employee database, stealing the personal information of more than 65,000 people and then selling the information online. Justin Johnson, 30, is being held at Butler County Prison and will be sentenced in four months, the Tribune-Review reported.	Guideline
	2021-05-24 01:23:41	Growing Mystery of Suspected Energy Attacks Draws US Concern (lien direct)	The Biden administration is facing new pressure to resolve a mystery that has vexed its predecessors: Is an adversary using a microwave or radio wave weapon to attack the brains of U.S. diplomats, spies and military personnel?
	2021-05-23 12:08:41	India\'s National Carrier Says Hack Leaked Passengers\' Data (lien direct)	Personal data of an unspecified number of travelers has been compromised after a company that serves India's national carrier was hacked, Air India said. The hackers were able to access 10 years' worth of data including names, passport and credit card details from the Atlanta-based SITA Passenger Service System, Air India said in a statement Friday.	Hack
	2021-05-21 15:07:29	ICS Vendors Assessing Impact of New OPC UA Vulnerabilities (lien direct)	Multiple companies that develop industrial systems are assessing the impact of two new OPC UA vulnerabilities on their products, and German automation technology firm Beckhoff is the first to release a security advisory.
	2021-05-21 14:01:52	Microsoft Unveils SimuLand: Open Source Attack Techniques Simulator (lien direct)	Microsoft this week announced the availability of SimuLand, an open source tool that enables security researchers to reproduce attack techniques in lab environments.	Tool
	2021-05-21 13:21:24	Tulsa Cybersecurity Attack Similar to Pipeline Attack (lien direct)	A cybersecurity attack on the city of Tulsa's computer system was similar to an attack on the Colonial Pipeline and that the hacker is known, officials said Thursday.
	2021-05-21 12:36:46	RSA Conference 2021 - Summary of Vendor Announcements (lien direct)
	2021-05-21 12:05:31	UK-Based API Security Firm 42Crunch Raises $17 Million (lien direct)	API security firm 42Crunch has raised $17 million in a Series A funding round led by Energy Impact Partners and joined by Adara Ventures. $17 million in a Series A round, especially outside of the U.S., is a strong indication of confidence in the technology from the investors.
	2021-05-21 11:02:46	Data Access Control Firm Immuta Raises $90 Million in Series D Funding (lien direct)	Cloud data access control solutions provider Immuta this week announced raising $90 million in Series D funding, which brings the total capital invested in the company to $169 million.
	2021-05-21 03:53:45	Healthcare IoT Cybersecurity Firm Cynerio Raises $30 Million (lien direct)	Healthcare IoT cybersecurity and asset management solutions provider Cynerio this week announced closing a $30 million Series B funding round. To date, the company has raised a total of $37 million.
	2021-05-20 18:52:37	Lessons Learned From High-Profile Exploits (lien direct)	In 2020, malicious actors took full advantage of the expanded threat landscape created by the increase in remote work. We saw the reappearance of older malware targeting older, unpatched devices in home networks, a seven-fold increase in ransomware attacks, and one of the most significant supply chain hacks in recent years.	Threat Ransomware Malware
	2021-05-20 13:54:50	Alaska Health Department Website Targeted in Malware Attack (lien direct)	The Alaska health department website was the target of a malware attack, officials said. A similar attack previously targeted the state's court system.	Malware
	2021-05-20 13:33:47	Endpoint Security Provider ThreatLocker Raises $20 Million (lien direct)	Endpoint security provider ThreatLocker this week announced that it secured $20 million in a Series B funding round that brings the total capital raised by the company to $24.5 million.
	2021-05-20 12:49:41	Member of Russian Gang That Hacked Tax Prep Firms Sentenced to Prison in U.S. (lien direct)	The United States Department of Justice this week announced the sentencing of a Russian national for his role in a group that attempted to obtain $1.5 million in tax refunds from the Department of the Treasury.
	2021-05-20 11:54:03	Google: Four Recently Patched Android Vulnerabilities Exploited in Attacks (lien direct)	Google has updated its May 2021 Android security bulletin to alert users that four vulnerabilities appear to have been exploited in attacks.
	2021-05-20 11:33:46	Israel Says Its Fighter Jets Bombed Buildings Used by Hamas Cyber Unit (lien direct)	The Israeli Air Force has claimed that in the past week its fighter jets bombed two buildings allegedly used by the cyber unit of Hamas, the Palestinian militant group that runs Gaza.

Last update at: 2024-08-07 09:19:09
See our sources.

To see everything: Our RSS (filtrered)