Iranian APT groups targeted critical infrastructure entities by exploiting known Microsoft Exchange Server and Fortinet vulnerabilities using malicious and legitimate tools.
Ransomware is the current king of the cybersecurity threat landscape, in part because of willingness to escalate to real-world damage to infrastructure. The DHS Secretary thinks that things are poised to go a step further in that direction in the very near future.
Since 2019, Facebook has been talking about adding end-to-end encryption to all its messaging services. It appears that the government of the United Kingdom would prefer that these plans go no further.
Report shows media and entertainment industry are facing a unique set of cyber threats such as using offensive and threatening content, pirating goods and counterfeiting tickets.
A group calling itself "Cyber Av3ngers," believed to be supported by Iran's government, has declared war against Western organizations making use of Israeli technology. One of the opening salvos in this campaign appears to be against US water utilities, with at least one confirmed strike by the Iranian hackers in Pennsylvania.
Russian state-sponsored hackers take 19 mins to break into a network. All of this means that even SMEs need to have a cyber response capable of keeping up with these advanced threat actors.
Cyber insurance companies are choosing to settle things quickly with a ransom payment during ransomware attacks for fear of covering all the business interruption costs and delays of re-booting a company from scratch.
Nothing much seems done to fix IoT security issues over the years with latest ISE report showing 125 CVEs, Common Vulnerabilities and Exposures, which has increased from 52 since 2013.
Crypto exchange Coinbase has said that it will reimburse customers that lost funds due to a recent data breach, and is also setting aside a $20 million reward for information leading to the arrest and conviction of the hackers.
Some of the biggest names in Big Tech may be considering pulling out of Hong Kong. The reason is a recently-implemented "doxxing" privacy law developed in the wake of the 2019 pro-democracy protests.
