Category: News

2021’s Most Dangerous Software Weaknesses

Saryu Nayyar, CEO at Gurucul, peeks into Mitre’s list of dangerous software bug types, highlighting that the oldies are still the goodies for attackers.

ZLoader’s Back, Abusing Google AdWords, Disabling Windows Defender

The well-known banking trojan retools for stealth with a whole new attack routine, including using ads for Microsoft TeamViewer and Zoom to lure victims in.

Pair of Google Chrome Zero-Day Bugs Actively Exploited

The security vulnerabilities bring the web behemoth up to 10 browser zero-days found so far this year.

Unpatched Bugs Plague Databases; Your Data Is Probably Not Secure – Podcast

Imperva’s Elad Erez discusses findings that 46 percent of on-prem databases are sitting ducks, unpatched and vulnerable to attack, each with an average of 26 flaws.

Romance, BEC Scams Lands Soldier in Jail for 46 Months

A former Army Reservist pleaded guilty to scamming the elderly with catfishing and stealing from veterans.

BlackMatter Ransomware Hits Japanese Tech Giant Olympus

The incident that occurred Sept. 8 and affected its EMEA IT systems seems to signal a return to business as usual for ransomware groups.

Apple Issues Emergency Fix for NSO Zero-Click Zero Day

Citizen Lab urges Apple users to update immediately. The new zero-click zero-day ForcedEntry flaw affects all things Apple: iPhones, iPads, Macs and Watches.

REvil’s Back; Coder Fat-Fingered Away Its Decryptor Key

How did Kaseya get a universal decryptor after a mind-bogglingly big ransomware attack? A REvil coder misclicked, generated & issued it, and “That’s how we sh*t ourselves.”

WhatsApp’s End-to-End Encryption Isn’t Actually Broken

WhatsApp’s moderators sent messages flagged by intended recipients. Researchers say this isn’t concerning — yet.

Honing Cybersecurity Strategy When Everyone’s a Target for Ransomware

Aamir Lakhani, researcher at FortiGuard Labs, explains why organizations must extend cyber-awareness training across the entire enterprise, from Luddites to the C-suite.