What the Titanic Can Teach Us About Fraud?
In early April, 1912, many people believed that the Titanic was unsinkable. On April 15, 1912, the Titanic sank and by late April, 1912, as the news spread, people no longer believed that the Titanic was unsinkable. I think that the story of the Titanic and the mistaken belief that it was unsinkable can teach…
Demo: Your data has been encrypted! Stopping ransomware attacks with Malwarebytes EDR
It’s no secret that ransomware is one of the most pressing cyber threats of our day. What worse, ransomware gangs have increased their attacks on a range of vulnerable industries, with disruptions to business operations, million-dollar ransom demands, data exfiltration, and extortion. With Malwarebytes Endpoint Detection and Response, however, you can fight—and defeat—advanced ransomware that…
Microsoft clamps down on RDP brute-force attacks in Windows 11
It wasn’t so long ago that we were wondering what improvements Windows 11 would make in the security stakes. Well, we haven’t had to wait too long to find out. Windows 11 build 22528.1000 and up will tackle one of the more common entry points for network intruders. Namely, trying to prevent the brute forcing…
Data Stolen in Breach at Security Company Entrust
The breach was discovered on June 18 and the firm started notifying customers on July 6. However, the intrusion came to light only on July 21 when security researcher Dominic Alvieri came across a copy of the notification sent by Entrust to customers. Entrust is a Minneapolis, MN-based company that provides security solutions for user…
Data Security Firm Sotero Raises $8 Million in Seed Funding
The round was led by OurCrowd, with participation from existing investors Boston Seed Capital, Gutbrain Ventures, and PBJ Capital. Founded in 2017, the Burlington, MA-based Sotero provides a data-focused security platform that allows for the centralized management of data instances, applications, and security point solutions. Sotero’s cloud-native, zero trust solution provides auditability, visibility, governance, and…
New Cross-Platform ‘Luna’ Ransomware Only Offered to Russian Affiliates
The ransomware is fairly simple, according to Kaspersky, whose researchers analyzed the malware, but it uses an encryption scheme that’s not typically used by ransomware — a combination of X25519 and AES. Luna is developed in Rust, which makes it easy to port to different platforms, and can also help evade static analysis. “Both the…
Phishing Bonanza: Social Engineering Savvy Skyrockets as Malicious Actors Cash In
This week, it came to light that gaming platform Roblox was breached via a phishing/social-engineering attack that led to the theft of internal documents and the leaking of them online in an extortion attempt. The hacker has posted documents on a forum that purport to contain information about some of Roblox’s most popular games and…
Exploitation of Recent Chrome Zero-Day Linked to Israeli Spyware Company
Google was informed about the vulnerability and attacks exploiting it on July 1 by cybersecurity company Avast, which observed it being used against its customers in the Middle East as part of what appeared to be highly targeted operations. The vulnerability is tracked as CVE-2022-2294 and it has been described as a heap buffer overflow…
60% of IT leaders are not confident about their secure cloud access
60% of IT and security leaders are not confident in their organization’s ability to ensure secure cloud access, even as adoption continues to grow across a diverse range of cloud environments, according to research from the Ponemon Institute. The Global Study on Zero Trust Security for the Cloud surveyed nearly 1,500 IT decision makers and…
Vulnerabilities in popular GPS tracker could allow hackers to remotely stop cars
Six vulnerabilities in the MiCODUS MV720 GPS tracker that’s used by organizations around the world to manage and protect vehicle fleets could be exploited by attackers to remotely cut fuel to or abruptly stop vehicles. “Attackers could choose to surreptitiously track individuals or demand ransom payments to return disabled vehicles to working condition,” BitSight researchers…
