Security News > 2020

Malware Attack Takes ISS World's Systems Offline
2020-02-21 16:04

Workplace experience and facility management company ISS World was hit this week by a malware attack that forced its systems offline. At the moment, the company's employees don't have access to corporate systems, as they were taken offline following a malware attack earlier this week.

US, UK Blame Russia for Cyberattack in Country of Georgia
2020-02-21 15:48

U.S. and U.K. officials are blaming the Russian military for launching an October 2019 cyberattack on the country of Georgia that crippled at least 2,000 government, news media and court websites over the course of one day. A few hours after the U.S. and U.K. released their statements about Georgia on Thursday, the New York Times reported that U.S. intelligence officials had recently warned U.S. lawmakers that Russia has already taken steps to interfere in the U.S. presidential election.

SMS Phishing Campaign Used to Spread Emotet: Report
2020-02-21 15:48

The phishing campaign apparently started earlier this year and has since slowed down, according to IBM. SMS Phishing. In their report, IBM researchers attribute the increasing spread of Emotet to a group that they refer to as the "Mealybug gang." After a lull of several months, Emotet resurfaced in September 2019, and it has been spreading rapidly since.

Compliance: Veritas tool adds intelligence and analysis to data supervision
2020-02-21 15:24

Veritas Technologies has rolled out a compliance tool to help clients ensure all critical data is identified, pinpointed, and protected in regulated industries like financial services and healthcare. In a blog post this week, the Santa Clara, CA-based company, a leader in data protection and availability, noted the increasing need for data supervision in an environment in which global regulations like GDPR become even more demanding and complex.

S2 Ep27: Bluetooth holes, dodgy Chrome extensions and forgotten passwords – Naked Security Podcast
2020-02-21 14:32

This week we discuss why Google abruptly pulled more than 500 Chrome extensions from its Web Store, the case of a man held in custody for refusing to decrypt two hard drives, and research detailing a number of security holes in Bluetooth chipsets. Greg Iddon plays host and producer this week and is joined by fellow Sophos experts Paul Ducklin and Peter Mackenzie.

Facilities Maintenance Firm Recovering From Malware Attack
2020-02-21 14:03

ISS World, a global facilities maintenance company based in Denmark, says it's gradually restoring its systems after a malware attack on Monday. ISS World says the "Root cause" of the attack has been identified.

FireEye Spotted Over 500 New Malware Families in 2019
2020-02-21 13:56

FireEye's incident response division Mandiant observed more than 500 new malware families last year, the company revealed in its M-Trends 2020 report released this week. FireEye analyzed 1.1 million malware samples per day in 2019 and it tracked a total of 1,268 malware families.

ISS World Hit with Malware Attack that Shuts Down Global Computer Network
2020-02-21 13:36

A Denmark-based global facility-management company was hit with a major cyber attack this week that shut down its worldwide computer systems for a few days and disrupted operations across its global network of employees. ISS World cut off access to shared IT services across its customer sites and offices worldwide after it was the target of a malware attack on Monday, Feb. 17, the company said in a press statement.

Larry Tesler, of copy-and-paste fame, dies at 74
2020-02-21 13:11

Larry Tesler, the computer scientist who is widely credited with the copy-and-paste function that is now nearly ubiquitous in user interfaces, has died at 74. Old-timers in the computer industry will tell you that "Everything that we take for granted in computing these days was invented at PARC", and there's a grain of truth in that rose-tinted reminiscence.

VMware Patches Serious Flaws in vRealize Operations for Horizon Adapter
2020-02-21 13:06

VMware has patched serious vulnerabilities, including remote code execution and authentication bypass issues, in vRealize Operations for Horizon Adapter. Horizon Adapter instances created on vRealize Operations Manager nodes enable users to receive communications from Horizon agents installed on virtual machines.