Microsoft Patches ‘Wormable’ Flaw in Windows XP, 7 and Windows 2003

Microsoft today is taking the unusual step of releasing security updates for unsupported but still widely-used Windows operating systems like XP and Windows 2003, citing the discovery of a “wormable” flaw that the company says could be used to fuel a fast-moving malware threat like the WannaCry ransomware attacks of 2017.

The vulnerability (CVE-2019-0709) resides in the “remote desktop services” component built into supported versions of Windows, including Windows 7, Windows Server 2008 R2, and Windows Server 2008. It also is present in computers powered by Windows XP and Windows 2003, operating systems for which Microsoft long ago stopped shipping security updates. Continue reading Microsoft Patches ‘Wormable’ Flaw in Windows XP, 7 and Windows 2003

Chinese Spies Stole NSA Cyberweapons Long Before Shadow Brokers Leak

Forensic analysis shows a Chinese APT using Equation Group hacking tools at least a year before Shadow Brokers dumped its cache in April 2017. Continue reading Chinese Spies Stole NSA Cyberweapons Long Before Shadow Brokers Leak

High Stakes, Rising Risks: The Ripple Effects of Cybersecurity in the Healthcare Sector

Is providing effective cybersecurity for the healthcare sector an IT problem or a wider-scope issue? The short answer is that it’s both.

The post High Stakes, Rising Risks: The Ripple Effects of Cybersecurity in the Healthcare Sector appeared first on Security Intelligence.

Continue reading High Stakes, Rising Risks: The Ripple Effects of Cybersecurity in the Healthcare Sector

Cyber Security Roundup for April 2019

The UK government controversially gave a green light to Huawei get involved with the building of the UK’s 5G networks, although the Chinese tech giant role will be limited to non-sensitive areas of the network, such as providing ant… Continue reading Cyber Security Roundup for April 2019

Thousands of firms hit by Beapy malware using NSA hacking tools

By Ryan De Souza
EternalBlue and DoublePulsar hacking tools are back in action. Symantec security researchers have identified that cybercriminals are still utilizing the classified exploits/hacking tools of the National Security Agency (NSA), which wer… Continue reading Thousands of firms hit by Beapy malware using NSA hacking tools

WannaCry hero MalwareTech pleads guilty to writing banking malware

By Ryan De Souza
MalwareTech is now facing 10 years in prison. In 2017, Marcus Hutchin who goes by the Twitter handle of MalwareTech halted the infamous WannaCry ransomware after registering its killswitch domain. As a result, Hutchin was hailed as Wan… Continue reading WannaCry hero MalwareTech pleads guilty to writing banking malware

Marcus Hutchins pleads guilty to two counts related to Kronos banking malware

A cybersecurity researcher known for helping stop the global spread of the WannaCry ransomware variant has pleaded guilty to computer hacking crimes related to the creation of banking malware. Marcus Hutchins, a British cybersecurity researcher, was accused of writing malware known as Kronos in 2014. According to a 2017 indictment, Hutchins allegedly created and updated Kronos while another unidentified person sold the malware on dark web marketplace AlphaBay and other cybercrime forums. Kronos was designed to steal log-in credentials and other financial information from online banking websites that are accessible via Internet Explorer, Mozilla Firefox and Google Chrome. Hutchins’ arrest made waves in the cybersecurity community after he was detained by FBI agents at McCarran International Airport in Las Vegas following the 2017 DEF CON security conference. Days later, he pleaded not guilty in federal court in Milwaukee. His trial was expected to begin this summer. The two counts that Hutchins pleaded guilty to […]

The post Marcus Hutchins pleads guilty to two counts related to Kronos banking malware appeared first on CyberScoop.

Continue reading Marcus Hutchins pleads guilty to two counts related to Kronos banking malware