Collaborate Disseminate
Microsoft first dismissed the elevation of privilege flaw but decided yesterday that attackers injecting malicious code is worthy of attention. Continue reading Windows EoP Bug Detailed by Google Project Zero
Attackers stole tens of millions of current, former or prospective customers’ personal data, the company confirmed. It’s providing 2 years of free ID protection. Continue reading T-Mobile: >40 Million Customers’ Data Stolen
A remote attacker could exploit a critical vulnerability to eavesdrop on live audio & video or take control. The bug is in ThroughTek’s Kalay network, used in 83m devices.
Continue reading Bug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop
Lost productivity & mopping up after the costly attacks that follow phishing – BEC & ransomware in particular – eat up most costs, not payouts to crooks. Continue reading Phishing Costs Nearly Quadrupled Over 6 Years
The seller claims to have sucker-punched U.S. infrastructure out of retaliation. The offer: 30m records for ~1 penny each, with the rest being sold privately. Continue reading 100m T-Mobile Customer Records Purportedly Up for Sale
That’s what NY State suggests could happen, given the utter lack of cybersec protection at many private equity & hedge fund firms. Can AI help avert it? Continue reading SolarWinds 2.0 Could Ignite Financial Crisis – Podcast
There’s an entirely new attack surface in Exchange, a researcher revealed at Black Hat, and threat actors are now exploiting servers vulnerable to the RCE bugs.
Continue reading Exchange Servers Under Active Attack via ProxyShell Bugs
Unit 42 puts the average payout at over half a million, while Barracuda has tracked a 64 percent year over year spike in the number of attacks. Continue reading Ransomware Payments Explode Amid ‘Quadruple Extortion’
LockBit offered Accenture’s purported databases and made a requisite jab at its purportedly sad security. Accenture says it recovered just fine from backups. Continue reading Accenture Confirms LockBit Ransomware Attack
Experts urged enterprises to patch fast: SAP vulnerabilities are being weaponized in a matter of hours. Continue reading SAP Patches Nine Critical & High-Severity Bugs