24 Feb 2021

Re-Embrace American S&T

The Potomac Institute for Technology studies has released a new brief outlining key areas in which the organization will focus on implementing with the goal of furthering science and technology efforts in the US. The publication serves as a guide for other cutting-edge-tech-focused companies on how to reinvigorate American science

Read More
23 Feb 2021

Chinese-Affiliated APT31 Cloned & Used NSA Hacking Tool

According to recent Check Point Security Research, Chinese threat actor group APT31 allegedly cloned and re-used a National Security Agency hacking tool years before Microsoft patched the severe vulnerability that it targeted. The tool was a Windows-based program that was referred to as “Jian” until the Microsoft vulnerability was patched

Read More
23 Feb 2021

10K Microsoft Email Users Hit in FedEx Phishing Attack

Microsoft users are receiving phishing emails fraudulently claiming to be from mail couriers FedEx and DHL Express. However, malicious links within the message steal credentials from victims. The recent attacks targeted at least 10,000 Microsoft users, according to the tech giant. The scams used phishing pages hosted on legitimate domains

Read More
23 Feb 2021

TDoS Attacks Take Aim at Emergency First-Responder Services

The FBI has warned that telephone denial-of-service attacks (TDoS) are targeting emergency dispatch centers, threatening their operations such as calling for emergency services like police, firefighters, or EMTs. The attacks affect the availability and readiness of these call centers, according to the FBI. A TDoS attack floods the recipient with

Read More
22 Feb 2021

Attackers Already Targeting Apple’s M1 Chip with Custom Malware

The M1 chip is the latest processor for Apple Macs. Malware authors have already created Mac-specific binaries that can target the ARM64 architecture used by these M1 processors. One of the malware downloaders is called Silver Sparrow and can use the MacOS installer’s JavaScript API to create communication with a

Read More
22 Feb 2021

Python programming language hurries out update to tackle remote code vulnerability

Python 3.9.1 and 3.8.8 have been rushed out by the Python Software Foundation after two security flaws. One of the two flaws is remotely exploitable, but only threatens to knock a machine offline. This remote code execution vulnerability is being tracked as CVE-2021-3177. The release of the new system upgrades

Read More
19 Feb 2021

Mac Malware Targeting Apple’s M1 Chip Emerges

A cybersecurity researcher named Patrick Wardle has uncovered the first piece of Mac malware that was potentially created specifically for devices running on Apple’s brand new M1 chip. Wardle specializes in Apple products and has created several open-source security tools for the brand. Wardle found the malware when rebuilding tools

Read More
19 Feb 2021

Kia Motors Hit With $20M Ransomware Attack

Kia Motors of America has publicly acknowledged that they are experiencing an extended system outage, however, the notorious ransomware gang DoppelPaymer has claimed it is behind the mayhem. The threat actor group claims to have successfully attacked Kia Motors in a ransomware operation, stating that they have the company’s files

Read More
19 Feb 2021

California DMV Warns of Data Breach After Contractor was Hit by Ransomware

The California Department of Motor Vehicles (DMV) has announced via email that its customers have been exposed after a contractor was hit by a ransomware attack. The contractor, Automatic Funds Transfer Services (AFTS), was utilized by the DMV for verifying changes of addresses within its national database. The DMV has

Read More
19 Feb 2021

Norway’s 11179 billion NOK wealth fund affected by the SolarWinds hack

According to a new announcement, Norway’s sovereign wealth fund was impacted by the SolarWinds Russian espionage campaign against US federal agencies and organizations. The Government Pension Fund has confirmed that countermeasures against the SolarWinds Orion software were not quickly adopted. The update was installed roughly five months before the bank

Read More