Security News

Check your Zoom background to remove sensitive personal-identifying items (or go virtual)
2021-02-02 15:20

Newfield said that it's easy to zoom in on items in the background of a Zoom window, such as bills or phone numbers hanging on a refrigerator or bulletin board. TechRepublic submitted three screenshots of a reporter's working environment at home and Newfield said he didn't see any security risks when he blew up the images.

Russian hackers hide Zebrocy malware in virtual disk images
2020-12-09 11:10

Russian-speaking hackers behind Zebrocy malware have changed their technique for delivering malware to high-profile victims and started to pack the threats in Virtual Hard Drives to avoid detection. Inside the image were a PDF file and an executable posing as a Microsoft Word document, which Zebrocy malware.

Combating the virtual and physical threats banks face
2020-12-08 05:30

Today, banks must contend with near-constant cyber attacks from organized criminal gangs, as well as highly skilled and well-resourced threat actors working on behalf of nation-states. The cyber threats facing banks are exacerbated by a large and complex infrastructure that presents threat actors with an extensive attack surface, allowing them to strike network infrastructure and systems like SWIFT, employees, customers, and physical assets like ATMs. The extent of these threats demands a proactive and persistent security program.

U.S., Australia Partner on Virtual Cyber Training Range Development
2020-12-07 13:10

The United States and Australia on Friday announced a partnership for the continuous development of a virtual cyber training range. The Cyber Training Capabilities Project Arrangement, which was signed on November 3, results in the incorporation of Australian Defense Force feedback into the U.S. Cyber Command's simulated training domain, the Persistent Cyber Training Environment.

Tufin and AWS Network Firewall deploy network protections for Amazon Virtual Private Clouds
2020-11-20 00:45

Tufin announced it will integrate with AWS Network Firewall, a new managed service that makes it easy to deploy essential network protections for all Amazon Virtual Private Clouds on Amazon Web Services, on-premise data centers and other cloud platforms for full visibility across the enterprise. "AWS is a very important cloud provider for our customers today and into the future, which is why we are excited to expand our collaboration and be a Launch Partner for AWS Network Firewall," said Pamela Cyr, Senior Vice President of Business and Corporate Development, Tufin.

Animal Jam kids' virtual world hit by data breach, impacts 46M accounts
2020-11-11 19:23

The immensely popular children's online playground Animal Jam has suffered a data breach impacting 46 million accounts. Animal Jam is a virtual world created by WildWorks, where kids can play online games with other members.

Ransomware attack shutters Brazilian courts. But did attackers breach the virtual machine divide?
2020-11-06 04:31

Brazil's Superior Tribunal de Justiça has temporarily shut down after a suspected ransomware attack. The Tribunal is second-highest of Brazil's courts and is the highest court that decides on federal matters other than constitutional law.

New RegretLocker ransomware targets Windows virtual machines
2020-11-03 17:31

A new ransomware called RegretLocker uses a variety of advanced features that allows it to encrypt virtual hard drives and close open files for encryption. When creating a Windows Hyper-V virtual machine, a virtual hard disk is created and stored in a VHD or VHDX file.

HITBCyberWeek virtual trainings: Mobile hacking, secure coding, bug hunting
2020-10-30 04:00

The virtual edition of the HITBCyberWeek 2020 security conference starts on November 15. Simultaneously, those in search for specific cyber security knowledge and effective exercises can opt for one of the virtual trainings that have been scheduled to take place.

HITBSecTrain: Cutting-edge virtual cyber security trainings on a monthly basis
2020-10-26 04:00

Among these new offerings is HITBSecTrain, an initiative launched by the organizers of Hack in the Box security conference, which has been offering deep-knowledge technical trainings in numerous cities since 2003. Known for featuring specialized security courses, HITB has worked with nearly 100 trainers across the years to offer cool, atypical trainings for security folks looking to hone their skills.