Security News > 2020 > November

Microsoft Defender for Identity now detects Zerologon attacks
2020-11-30 15:00

Microsoft has added support for Zerologon exploitation detection to Microsoft Defender for Identity to allow Security Operations teams to detect on-premises attacks attempting to abuse this critical vulnerability. Microsoft Defender for Identity is a cloud-based security solution designed to leverage on-premises Active Directory signals to detect and analyze compromised identities, advanced threats, and malicious insider activity targeting an enrolled organization.

Dozens of Dormant North American Networks Suspiciously Resurrected at Once
2020-11-30 14:55

More than fifty networks in the North American region suddenly burst to life after being dormant for a long period of time, Spamhaus reveals. The organization noticed last week that 52 dormant networks in the ARIN area were resurrected concurrently, and that each of them has been announced by a different autonomous system number, also inactive for a significant period of time.

Tens of Dormant North American Networks Suspiciously Resurrected at Once
2020-11-30 14:55

More than fifty networks in the North American region suddenly burst to life after being dormant for a long period of time, Spamhaus reveals. The Geneva-based international nonprofit organization...

Gootkit malware returns to life alongside REvil ransomware
2020-11-30 14:40

After a year-long vacation, the Gootkit information-stealing Trojan has returned to life alongside REvil Ransomware in a new campaign targeting Germany. Gootkit bursts back to life with ransomware partnership.

IBM offers quantum-safe cryptography support for key management and app transactions in the cloud
2020-11-30 14:32

Pioneered by IBM Research scientists, the company is now offering quantum-safe cryptography support for key management and application transactions in IBM Cloud, making it the industry's most holistic quantum-safe cryptography approach to securing data available today. "As our reliance on data grows in the era of hybrid cloud and quantum computing capabilities advance, the need for data privacy is becoming even more critical. IBM now offers the most holistic quantum-safe approach to securing data available today and to help enterprises protect existing data and help protect against future threats," said Hillery Hunter, Vice President and Chief Technology Officer, IBM Cloud.

SD-WAN Product Vulnerabilities Allow Hackers to Steer Traffic, Shut Down Networks
2020-11-30 13:40

Researchers at cybersecurity consulting firm Realmode Labs have identified vulnerabilities in SD-WAN products from Silver Peak, Cisco, Citrix and VMware, including potentially serious flaws that can be exploited to steer traffic or completely shut down an organization's network. Realmode Labs has published four blog posts this month describing the vulnerabilities found by Ariel Tempelhof and Yaar Hahn in SD-WAN solutions from VMware, Cisco, Citrix and Silver Peak, which HP acquired earlier this year.

Healthcare provider AspenPointe data breach affects 295K patients
2020-11-30 13:12

U.S. healthcare provider AspenPointe notified patients of a data breach stemming from a September 2020 cyberattack that enabled attackers to steal protected health information and personally identifiable information. AspenPointe is a nonprofit funded by Medicaid, state, federal, and local government contracts, as well as donations, that manages 12 organizations serving over 50,000 individuals and families every.

Naked Security Live – The Gift Card hackers
2020-11-30 13:10

Did you know you can join us for a live cybersecurity lecture every Friday? Thanks for watching hope to see you online later this week!

Report Claims CIA Controlled Second Swiss Encryption Firm
2020-11-30 12:46

Swiss politicians have voiced outrage and demanded an investigation after revelations that a second Swiss encryption company was allegedly used by the CIA and its German counterpart to spy on governments worldwide. He called for a parliamentary inquiry after an SRF investigation broadcast on Wednesday found that a second Swiss encryption firm had been part of a spectacular espionage scheme orchestrated by US and German intelligence services.

Vietnam-Linked Cyberspies Use New macOS Backdoor in Attacks
2020-11-30 12:24

Trend Micro's security researchers have identified a new macOS backdoor that they believe is used by the Vietnamese threat actor OceanLotus. A document used in the campaign features a Vietnamese name, which has led researchers to believe that users from Vietnam have been targeted with the new malware.