Category: News

HPE Warns Sudo Bug Gives Attackers Root Privileges to Aruba Platform

HPE joins Apple in warning customers of a high-severity Sudo vulnerability.

Army Testing Facial Recognition in Child-Care Centers

Army looking for AI to layer over daycare CCTV to boost ‘family quality of life.’

The Underground Economy: Recon, Weaponization & Delivery for Account Takeovers

In part one of a two-part series, Akamai’s director of security technology and strategy, Tony Lauro, lays out what orgs need to know to defend against account takeover attacks.

Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping

The bug (CVE-2021-33766) is an information-disclosure issue that could reveal victims’ personal information, sensitive company data and more.

LockBit Gang to Publish 103GB of Bangkok Air Customer Data

The airline announced the breach on Thursday, and the ransomware gang started a countdown clock the next day.

T-Mobile’s Security Is ‘Awful,’ Says Purported Thief

John Binns, claiming to be behind the massive T-Mobile theft of >50m customer records, dissed the security measures of the US’s No. 2 wireless biggest carrier. T-Mobile is “humbled,” it…
Read more

Parallels Offers ‘Inconvenient’ Fix for High-Severity Bug

Firm offers guidance on how to mitigate a five-months-old privilege escalation bug impacting Parallels Desktop 16 for Mac and all previous versions.

Experts: WH Cybersecurity Summit Should Be Followed by Regulation, Enforcement

Amazon, Google, Microsoft etc. making major commitments to shore up nation’s cyber-defenses just won’t be enough, researchers say.

Winning the Cyber-Defense Race: Understand the Finish Line

Kerry Matre, Mandiant senior director, clears up misconceptions about the value to business for enterprise cyber-defense. Hint: It’s not achieving visibility.

FIN8 Targets US Bank With New ‘Sardonic’ Backdoor

The latest refinement of the APT’s BadHatch backdoor can leverage new malware on the fly without redeployment, making it potent and nimble.