Security News > 2021

Windows Terminal now has a hidden graphical Settings editor
2021-02-15 19:16

If you are not familiar with Windows Terminal, it is an open-source application developed by Microsoft that allows you to open multiple console tabs in the same Windows. In the current Windows Terminal 1.5 release, you need to modify a settings.

Microsoft is testing a hidden Windows Terminal Settings screen
2021-02-15 19:16

If you are not familiar with Windows Terminal, it is an open-source application developed by Microsoft that allows you to open multiple console tabs in the same Windows. In the current Windows Terminal 1.5 release, you need to modify a settings.

Sandworm Hackers Hit French Monitoring Software Vendor Centreon
2021-02-15 19:11

The French National Agency for the Security of Information Systems is publicly blaming the notorious Sandworm APT group for a series of long-term hacking attacks against multiple IT and web hosting shops in Europe. According to a technical advisory released by ANSSI, the data breaches date back to 2017 and include the eyebrow-raising compromise of Centreon, an IT monitoring software provider widely embedded throughout government organizations in France.

Deliberately Playing Copyrighted Music to Avoid Being Live-Streamed
2021-02-15 19:11

In a separate part of the video, which Devermont says was filmed later that same afternoon, Devermont approaches Fair outside. The interaction plays out almost exactly like it did in the department - when Devermont starts asking questions, Fair turns on the music.

Cyberattack on Dutch Research Council (NWO) suspends research grants
2021-02-15 18:50

Servers belonging to the Dutch Research Council have been compromised, forcing the organization to make its network unavailable and suspend subsidy allocation for the foreseeable future. The NWO is tasked with investing in research and research infrastructure to increase quality and innovation in science.

Egregor ransomware criminals allegedly busted in Ukraine
2021-02-15 18:40

According to a report from radio station France Inter, numerous cybercriminals connected to the Egregor ransomware gang have recently been arrested. Since Tuesday [last week], police in the two countries have been working together in an effort to dismantle a cybercrime group suspected of initiating hundreds of ransomware attacks dating back to September 2020.[] Police arrested a number of hackers suspected of working with the Egregor cybercrime gang, providing hacking, logistical, and financial support.

France links Russian Sandworm hackers to hosting provider attacks
2021-02-15 18:23

The French national cyber-security agency has linked a series of attacks that resulted in the breach of multiple French IT providers over a span of four years to the Russian-backed Sandworm hacking group. According to the French cyber-security agency, the campaign shows several similarities to behavior observed while analyzing previous Sandworm attacks, including intrusion campaigns before choosing one of the victims for further compromise.

Linux 101: How to remove legacy communication services
2021-02-15 17:00

To keep your Linux servers and desktops as secure as possible, you should check for legacy communication services. One thing you can do with Linux is remove the legacy communications services that can be installed by default, even though they are never used.

Microsoft will alert Office 365 admins of Forms phishing attempts
2021-02-15 16:51

Microsoft is adding new security warnings to the Security and Compliance Center default alert policies to inform IT admins of detected phishing attempts abusing Microsoft Forms in their tenants. It has recently been made available for personal use to anyone with a Microsoft account after previously being available only to business users with Microsoft 365 Personal and Microsoft 365 Family subscriptions.

Many SolarWinds Customers Failed to Secure Systems Following Hack
2021-02-15 16:00

Many companies still expose SolarWinds Orion to the internet and have failed to take action following the disclosure of the massive SolarWinds breach, according to RiskRecon, a Mastercard company that specializes in risk assessment. Threat actors believed to be backed by Russia breached Texas-based IT management firm SolarWinds and used that access to deliver a piece of malware named Sunburst to roughly 18,000 customers who had been using the company's Orion monitoring product.