What's new arround internet
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
 |
2021-06-03 17:14:28 | Two Carbanak Gang Members Sentenced to 8 Years in Prison (lien direct) | Two members of the notorious Carbanak cybergang were sentenced to 8 years in prison, Kazakhstani authorities announced this week. | |||
|
2021-06-03 17:05:39 | Cisco Plugs High-Risk Security Flaws in Webex, SD-WAN (lien direct) | Enterprise security vendor Cisco has shipped fixes for a wide range of severity vulnerabilities, including patches for high-risk flaws in the widely deployed Webex Player, SD-WAN software, and ASR 5000 series software. | |||
|
2021-06-03 14:44:13 | CISA Issues MITRE ATT&CK Mapping Guide for Threat Intelligence Analysts (lien direct) | The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday announced the availability of a new guide for cyber threat intelligence analysts on the use of the MITRE ATT&CK framework. | Threat | ||
|
2021-06-03 13:49:50 | Trend Micro Releases PoC Exploit for Vulnerability Affecting macOS, iOS (lien direct) | Trend Micro on Thursday disclosed the details of a recently patched privilege escalation vulnerability that has been found to impact macOS, iOS and iPadOS. | Vulnerability | ||
|
2021-06-03 12:49:22 | At Odds: The Promise vs. Operational Reality of Security Solutions (lien direct) | There's a gap between the promise of a security technology and operational reality | |||
|
2021-06-03 12:39:34 | Chinese Hackers Using Previously Unknown Backdoor (lien direct) | Newly discovered cyber weapon uses elaborate multi-stage infection-chain to make detection and analysis difficult | |||
|
2021-06-03 12:22:44 | Enterprise Mobile Security Startup Hypori Raises $20 Million (lien direct) | Enterprise mobile security company Hypori this week announced it raised $20 million in a Series A funding round led by GreatPoint Ventures (GPV). To date, the company raised $33.9 million. | |||
|
2021-06-03 12:07:00 | Biden Says \'Looking\' at Russia Retaliation Over Cyberattack (lien direct) | US President Joe Biden said Wednesday he is "looking" at possible retaliation after the White House linked Russia to a cyberattack against global meat processing giant JBS. | |||
|
2021-06-03 11:35:08 | Many CISOs Blame Cyberattack Surge on Remote Working: VMware (lien direct) | Cybersecurity professionals have seen a surge in cyberattacks in the past year, and many blamed the trend on more employees working from home due to the COVID-19 pandemic, according to a report published on Thursday by VMware. | |||
|
2021-06-03 10:43:38 | FBI Confirms REvil Ransomware Involved in JBS Attack (lien direct) | The FBI has publicly confirmed that the REvil ransomware was used in the cyberattack that forced the world's largest meat processing company to shut down systems. | Ransomware | ||
|
2021-06-03 04:08:59 | Oak9 Launches Infrastructure-as-Code Security Platform With $5.9M in Seed Funding (lien direct) | oak9 on Wednesday announced the launch of its Infrastructure-as-Code (IaC) security platform, backed by a $5.9 million seed funding round. IaC is the process of managing and provisioning of infrastructure through code instead of through manual processes. | |||
|
2021-06-02 22:36:27 | FireEye, Mandiant Split Apart in $1.2B Private Equity Deal (lien direct) | FireEye (NASDAQ: FEYE) on Wednesday announced plans to sell its products business, including the FireEye name, as part of a $1.2 billion transaction that splits off the Mandiant Solutions unit from the company's endpoint protection and cloud security products. | |||
|
2021-06-02 18:21:02 | Microsoft Buys ReFirm Labs to Expand IoT Firmware Security Push (lien direct) | Microsoft's aggressive push to ferret out security problems in the firmware powering IoT devices took on new urgency this week with the acquisition of ReFirm Labs, an early-stage startup that helps businesses pinpoint and fix weak links at the firmware layer. | |||
|
2021-06-02 17:15:14 | Largest Meat Producer Getting Back Online After Cyberattack (lien direct) | The world's largest meat processing company has resumed most production after a weekend cyberattack, but experts say the vulnerabilities exposed by this attack and others are far from resolved. | |||
|
2021-06-02 15:31:48 | Ransomware Attack Hits Nantucket, Martha\'s Vineyard Ferry Service (lien direct) | Steamship Authority Hit by Cyberattack | |||
|
2021-06-02 15:24:08 | Cisco Discloses Details of macOS SMB Vulnerabilities (lien direct) | Cisco's Talos threat intelligence and research unit on Wednesday disclosed the details of several SMB-related vulnerabilities patched recently by Apple in its macOS operating system. SMB, which stands for Server Message Block, is a protocol for sharing files, printers, and serial ports. Apple's own SMB stack is called SMBX. | Threat | ||
|
2021-06-02 15:02:21 | Actively Exploited Zero-Day Found in WordPress Plugin Used by Many Online Stores (lien direct) | More than 17,000 websites are exposed to attacks targeting a critical zero-day vulnerability in the Fancy Product Designer WordPress plugin, the Wordfence team at WordPress security company Defiant warns. | Vulnerability | ||
|
2021-06-02 13:05:07 | Zerodium Offers $100,000 for Pidgin Zero-Day Exploits (lien direct) | Exploit acquisition firm Zerodium on Tuesday announced that it is offering $100,000 for severe vulnerabilities in Pidgin for Windows and Linux. | |||
|
2021-06-02 12:06:38 | Vulnerability in Lasso Library Impacts Products From Cisco, Akamai (lien direct) | A high-severity vulnerability discovered recently in an open source library named Lasso has been found to impact products from Cisco and Akamai, as well as Linux distributions. | Vulnerability | ★★★ | |
|
2021-06-02 11:11:44 | Industrial Switches From Several Vendors Affected by Same Vulnerabilities (lien direct) | Industrial switches provided by several vendors are affected by the same vulnerabilities due to the fact that they share firmware made by Taiwan-based industrial networking solutions provider Korenix Technology. | |||
|
2021-06-02 10:20:28 | US Seizes 2 Domain Names Used in Cyberespionage Campaign (lien direct) | The Justice Department said Tuesday that it has seized two domain names used in a cyberespionage campaign that targeted U.S. and foreign government agencies, think tanks and humanitarian groups. | ★★★ | ||
|
2021-06-02 00:41:41 | (Déjà vu) Meat Producer JBS Says Expects Most Plants Working Wednesday (lien direct) | A ransomware attack on the world's largest meat processing company disrupted production around the world just weeks after a similar incident shut down a U.S. oil pipeline. | Ransomware | ||
|
2021-06-01 22:44:15 | Poisoned Installers Found in Solarwinds Hackers Toolkit (lien direct) | The ongoing multi-vendor investigations into the Solarwinds mega-hack took another twist this week with the discovery of new malware artifacts that could be used in future supply chain attacks. | Malware | ||
|
2021-06-01 20:03:39 | Report: Accellion Failed to Notify Customers of FTA Zero-Day (lien direct) | Accellion failed to notify customers of a zero-day vulnerability in its file transfer application (FTA) and related cyber-attacks targeting the security flaw, according to a new report from professional services firm KPMG. | Vulnerability | ||
|
2021-06-01 19:52:53 | Kaspersky: Exploits for MS Office Flaws Most Popular in Q1 2021 (lien direct) | Exploits for vulnerabilities in Microsoft's Office suite were the most popular among cyber-attackers during the first quarter of this year, according to a new Kaspersky report. | |||
|
2021-06-01 19:14:59 | Meat Producer Ransomware Attack Disrupts Global Production (lien direct) | A ransomware attack on the world's largest meat company is disrupting production around the world just weeks after a similar incident shut down a U.S. oil pipeline. | Ransomware | ||
|
2021-06-01 15:41:08 | Exabeam Lands $200M Investment, Replaces CEO (lien direct) | Exabeam, a late-stage startup in the data analytics and SIEM space, has landed a new $200 million funding round that values the company at $2.5 billion. | |||
|
2021-06-01 13:42:50 | No Time to Waste: Three Ways to Quickly Reduce Risk in Critical Infrastructure Environments (lien direct) | Earlier this month, the U.S. experienced it first major shutdown of critical infrastructure due to a cyberattack in the nation's history. When adversaries targeted Colonial Pipeline with a disruptive ransomware attack, critical infrastructure security immediately became a mainstream concern, because the attack is unprecedented in terms of its impact. | Ransomware | ||
|
2021-06-01 13:16:24 | [redacted] Emerges From Stealth to Help Companies Pursue, Disrupt Adversaries (lien direct) | [redacted] emerged from stealth mode on Tuesday with $35 million in Series B funding and a cyber defense and response solution that enables organizations to pursue and disrupt adversaries. | |||
|
2021-06-01 12:41:33 | Swedish Public Health Agency Says Disease Database Targeted in Cyberattacks (lien direct) | The Swedish Public Health Agency (Folkhälsomyndigheten) is currently investigating several attempts to hack into SmiNet, a database that stores reports of infectious diseases, including COVID-19 cases. | Hack | ||
|
2021-06-01 11:36:59 | (Déjà vu) Cybersecurity M&A Roundup: 36 Deals Announced in May 2021 (lien direct) | 
Tens of cybersecurity mergers and acquisitions were announced in May 2021, including by Imperva, Accenture, Cisco, HelpSystems, Splunk, Twilio, and Zscaler.
|
|||
|
2021-06-01 11:23:01 | Meat-packing Giant JBS USA Shuts Down Systems Following Cyberattack (lien direct) | JBS USA, the US subsidiary of the world's largest meat processing company, said Monday that some operations were shut down following a cyberattack that affected its North American and Australian IT network. | |||
|
2021-05-31 17:02:50 | Microsoft Creates Cybersecurity Council for the Public Sector in APAC (lien direct) | Looking to build stronger responses against cyberattacks in the Asia Pacific (APAC) region, Microsoft on Monday announced the creation of a cybersecurity council for the public sector in the region. | |||
|
2021-05-31 14:02:05 | Interpol Says 585 People Arrested in APAC Operation Against Cyber-Enabled Crime (lien direct) | Interpol revealed last week that specialized law enforcement officers in the Asia-Pacific (APAC) region intercepted more than $83 million in fraudulent money transfers as part of a six-month coordinated effort aimed at cyber-enabled financial crime. | |||
|
2021-05-31 13:18:56 | Kenyan Arrested in Qatar First Targeted by Phishing Attack (lien direct) | A Kenyan security guard now facing charges in Qatar after writing compelling, anonymous accounts of being a low-paid worker there found himself targeted by a phishing attack that could have revealed his location just before his arrest, analysts say. | |||
|
2021-05-31 13:04:35 | SonicWall Patches Command Injection Flaw in Firewall Management Application (lien direct) | SonicWall last week announced the availability of patches for a severe vulnerability in its Network Security Manager (NSM) product. | Vulnerability | ||
|
2021-05-31 12:35:09 | Cybercriminals Target Companies With New \'Epsilon Red\' Ransomware (lien direct) | A new piece of ransomware named Epsilon Red has been used to target at least one organization in the United States, and its operators have apparently already made a significant profit. | Ransomware | ||
|
2021-05-31 11:07:15 | CISA-FBI Alert: 350 Organizations Targeted in Attack Abusing Email Marketing Service (lien direct) | An alert released on Friday by the FBI and the DHS's Cybersecurity and Infrastructure Security Agency (CISA) revealed that the number of organizations targeted in a recent attack abusing a legitimate email marketing service was higher than initially reported. | |||
|
2021-05-31 10:18:26 | Activists Launch Action Against \'Cookie Banner Terror\' (lien direct) | A group of online privacy activists said Monday it is taking action against hundreds of websites over their use of pop-up banners asking users to consent to "cookies", the files that track users' activity. | |||
|
2021-05-30 14:19:20 | US Says Agencies Largely Fended Off Latest Russian Hack (lien direct) | The White House says it believes U.S. government agencies largely fended off the latest cyberespionage onslaught blamed on Russian intelligence operatives, saying the spear-phishing campaign should not further damage relations with Moscow ahead of next month's planned presidential summit. | Hack | ||
|
2021-05-28 19:25:58 | Nuclear Flash Cards: US Secrets Exposed on Learning Apps (lien direct) | US troops charged with guarding nuclear weapons in Europe used popular education websites to create flash cards, exposing their exact locations and top-secret security protocols, according to the investigative site Bellingcat Friday. | |||
|
2021-05-28 18:55:40 | Security Analytics Firm Uptycs Raises $50 Million (lien direct) | Cloud-native security analytics provider Uptycs has closed a $50 million Series C funding round, bringing the total raised by the company to date up to $93 million. The latest funding round was led by Norwest Venture Partners, with additional participation from Sapphire Ventures and ServiceNow Ventures. | |||
|
2021-05-28 15:08:02 | Newly Disclosed Vulnerability Allows Remote Hacking of Siemens PLCs (lien direct) | Researchers at industrial cybersecurity firm Claroty have identified a serious vulnerability that can be exploited by a remote and unauthenticated attacker to hack some of the programmable logic controllers (PLCs) made by Siemens. | Hack Vulnerability | ||
|
2021-05-28 14:37:28 | Resilience: RSA Conference 2021 (lien direct) | For many of us, RSA Conference 2020 in San Francisco was the last time we came together as a community, met with colleagues, and saw new technology offerings. It was one of the last global events held in person before the lockdown, and since that time, we've had to switch to digital methods for interaction and communication. | |||
|
2021-05-28 14:09:57 | Chinese Hackers Started Covering Tracks Days Before Public Exposure of Operations (lien direct) | One of the Chinese threat actors targeting Pulse Secure VPN appliances via a recently disclosed vulnerability has been attempting to cover its tracks by removing its webshells from victim networks, FireEye reports. | Vulnerability Threat | ||
|
2021-05-28 13:35:15 | Canada Post Says 950,000 Customers Hit by Breach at Supplier (lien direct) | Canada Post, the primary postal operator in Canada, has informed 44 of its large business customers that some information was compromised as a result of a malware attack at a supplier. | Malware | ||
|
2021-05-28 12:36:15 | FBI Shares IOCs for APT Attacks Exploiting Fortinet Vulnerabilities (lien direct) | The FBI on Thursday published indicators of compromise (IOCs) associated with the continuous exploitation of Fortinet FortiOS vulnerabilities in attacks targeting commercial, government, and technology services networks. | |||
|
2021-05-28 11:28:41 | SolarWinds Hackers Impersonate U.S. Government Agency in New Attacks (lien direct) | The Russia-linked threat group believed to be behind the SolarWinds attack has been observed launching a new campaign this week. | Threat | ||
|
2021-05-27 19:05:11 | What Cybersecurity Can Learn From Video Games (Part II) (lien direct) | By taking some lessons from outside our cybersecurity sandbox, we can address some of the significant challenges in cybersecurity | |||
|
2021-05-27 18:53:01 | U.S. Charges 22 in Stolen Payment Cards Crackdown (lien direct) | The U.S. Justice Department this week announced indictments against 22 individuals who allegedly purchased and used payment cards stolen from a national retail chain. |
To see everything:
Our RSS (filtrered)
