A week in security (July 5 – July 11)
Last week on Malwarebytes Labs: Racing against a real-life ransomware attack. Podcast with Ski Kacoroski.Kaseya CEO: “The impact of this...
News
Four Critical Flaws Identified in Sage X3 ERP Software
Cybersecurity firm Rapid7 announced on Wednesday that it discovered four security flaws in the Sage X3 ERP software, resource, and...
15 Philips Vue Vulnerabilities Could Result in Full Takeover of the Devices
CISA has released an advisory about several vulnerabilities found in Philips Vue PACS health devices. In the hands of a...
Hackers Have Devised a New Trick to Disable Macro Security Warnings
Threat actors have found a novel method for disabling macro security warnings in malspam assaults that use non-malicious documents. Microsoft...
Dutch Institute Exposes Flaws in Kaseya – VSA Platform
In the wake of the recent catastrophic attack on its VSA platform, Kaseya collaborated with scientists to fix a bug...
BIOPASS malware abuses OBS Studio to spy on victims
Researchers spotted a new malware, dubbed BIOPASS, that sniffs victim’s screen by abusing the framework of Open Broadcaster Software (OBS) Studio. Researchers...
Kaseya releases patches for flaws exploited in massive ransomware supply-chain attack
Kaseya has released a security update to address the VSA zero-day vulnerabilities exploited by REvil gang in the massive ransomware...
Magecart hackers hide stolen credit card data into images and bogus CSS files
Magecart hackers continuously improve their exfiltration techniques to evade detection, they are hiding stolen credit card data into images. Magecart...
Biden discussed Russian ransomware gangs with Putin in a phone call
President Joe Biden expressed concerns about ransomware attacks carried out by Russian gangs during a phone call with President Vladimir...
Experts discussed how to fight cyberbullying on children at Cyber Polygon 2021
At the international online cybersecurity training Cyber Polygon 2021, organized by BI.ZONE, Stanislav Kuznetsov, Deputy Chairman of Sberbank, and Henrietta...
Chinese Hackers Target Taiwanese Telecom Firms
The Insikt Group, the intelligence research department of the US network security consulting firm Recorded Future, published a report on...
Oil & Gas Targeted in Year-Long Cyber-Espionage Campaign
A sophisticated campaign aimed at big multinational oil and gas firms has been running for more than a year, spreading...
Job Seeking Engineers Have Become Lazarus Gang’s New Target
Amid operations sending malicious documentation to work-seekers, the renowned group Lazarus advanced persistent threat (APT) has been identified. In this...
After a Ransomware Attack, CNA Reports a Data Breach
Following a Phoenix CryptoLocker ransomware attack in March, CNA Financial Corporation, a leading US-based insurance firm, is notifying clients of...
Hackers accessed Mint Mobile subscribers’ data and ported some numbers
Mint Mobile discloses a data breach, an unauthorized attacker gained access to subscribers’ account information and ported phone numbers. Mint...
Security Affairs newsletter Round 322
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...
Iran’s railroad system was hit by a cyberattack, hackers posted fake delay messages
Iran’s railroad system was hit by a cyberattack, hackers posted fake messages about delays or cancellations of the trains on...
Are Online Brands Prioritizing Speed Over Security? Here’s a Quick Look
Concern over online security has risen significantly in recent times. According to research published by Trulioo, consumers around the world...
Online Support Agents Being Targeted Through Live Chat Platforms
Phishing scammers are pretending to be customers contact live-chat assistance agents with fake issues, making them open infected files, says...
Millions of Login Credentials Stolen By an ‘Unnamed Malware’
Cybersecurity researchers from Nord Security have unearthed a new set of Trojan-type malware that has exploited over three million Windows...
Email Fatigue Elevates Cyber Crime Rates
According to research, email is indeed the most preferred medium of communication by almost 86 percent of professionals. Whilst the...
Cloud Cryptomining Scam in Google Play Rakes in Cash
Researchers stated that fraudulent crypto mining applications available for download on Google Play have scammed more than 93,400 people so...
Kaseya warns customers of ongoing malspam campaign posing as security updates
Threat actors are conducting a spam campaign aimed at infecting Kaseya customers, posing as legitimate VSA security updates Kaseya is...
How to send an anonymous email
Sometimes readers ask us how to send an anonymous email or how criminals and scammers manage to send anonymous emails....
