Security News > 2021

Europol 'unlocks' encrypted Sky ECC chat service to make arrests
2021-03-10 19:03

Image: Sky ECC. European law enforcement authorities have made a large number of arrests after a joint operation involving the monitoring of organized crime communication channels after "Unlocking" Sky ECC chat's encryption. The investigation started after Belgium police seized mobile phones from criminals who used Sky ECC. After "Unlocking" the chat platform's encryption, investigators have been able to monitor communications between roughly 70,000 Sky ECC users.

Hacktivists breach Verkada and view 150,000 CCTV cams in hospitals, prisons, a Tesla factory, even Cloudflare HQ
2021-03-10 19:01

A CCTV camera biz which left an admin account username and password exposed on the World Wide Web has, you guessed it, been targeted by hacktivists. Those cameras belonged to a whole host of organisations, according to the Bloomberg financial newswire, including: Tesla; Cloudflare; hospitals; police stations; prisons and, allegedly, more.

Windows 10 crashes when printing due to Microsoft March updates
2021-03-10 17:50

Update: Microsoft has released out-of-band non-security updates to address the Windows 10 printing crash issue. The Windows 10 KB5000802 and KB5000808 cumulative updates released yesterday are causing Blue Screen of Death crashes when printing to network printers.

F5 urges customers to patch critical BIG-IP pre-auth RCE bug
2021-03-10 17:04

F5 Networks, a leading provider of enterprise networking gear, has announced four critical remote code execution vulnerabilities affecting most BIG-IP and BIG-IQ software versions. F5 BIG-IP software and hardware customers include governments, Fortune 500 firms, banks, internet service providers, and consumer brands, with the company claiming that "48 of the Fortune 50 rely on F5.".

F5 urges customers to patch 4 critical BIG-IP pre-auth RCE bugs
2021-03-10 17:04

F5 Networks, a leading provider of enterprise networking gear, has announced four critical remote code execution vulnerabilities affecting most BIG-IP and BIG-IQ software versions. F5 BIG-IP software and hardware customers include governments, Fortune 500 firms, banks, internet service providers, and consumer brands, with the company claiming that "48 of the Fortune 50 rely on F5.".

Nim-Based Malware Loader Spreads Via Spear-Phishing Emails
2021-03-10 16:40

The TA800 threat group is distributing a malware loader, which researchers call NimzaLoader, via ongoing, highly-targeted spear-phishing emails. The malware loader is unique in that it is written in the Nim programming language.

Proposed Bill Would Allow Americans to Sue Foreign Cyber-Actors
2021-03-10 16:03

A bill introduced in the House of Representatives this week could allow United States citizens to seek monetary damages if cyber-attacks by foreign threat actors harm them in any way. Per the bill, Americans would be able to make claims in federal or state courts if they are in any way affected by cyber-attacks that foreign states have conducted against them.

Norway parliament data stolen in Microsoft Exchange attack
2021-03-10 15:57

Norway's parliament, the Storting, has suffered another cyberattack after threat actors stole data using the recently disclosed Microsoft Exchange vulnerabilities. Last week, Microsoft released emergency security updates for Microsoft Exchange to fix zero-day vulnerabilities, known as ProxyLogon, used in attacks.

How organizations can combat the security risks of working remotely
2021-03-10 15:49

The coronavirus outbreak and lockdown forced many organizations to close their offices and shift employees to a remote work setup. Such a quick and abrupt transition opened the door to a host of security risks, especially from people who are unaccustomed to working remotely.

Datto acquires BitDam to help shape the security roadmap for MSPs
2021-03-10 15:42

Its leading threat detection technology was built to stop zero-day threats including those that do not match any known malware signatures, proactively defending against malware and phishing threats within a user's inbox, chat, or cloud drive. MSPs report phishing as the most common cause of successful ransomware breaches, according to Datto's annual Global State of the Channel Ransomware Report, a survey of global MSPs. "Cyber resilience has been at Datto's core since the launch of our flagship Continuity service and the Datto Cloud over a decade ago," said Tim Weller, CEO of Datto.