SecurityWeek

Post-mortem analysis of data breaches shows that most of today’s cyber-attacks are front ended by phishing campaigns. The most recent CryptoForHealth Twitter Hacker is just one of many examples. This is not surprising, since the easiest way for a threat actor to gain access to sensitive data is by compromising an end user’s identity and credentials.

The highly popular WordPress plugin File Manager this week received a patch to address an actively exploited zero-day vulnerability. 

A Chinese threat actor was observed targeting both European diplomatic entities and the Tibetan community with the same strain of malware.

Google this week increased the reward amounts paid to researchers for reporting abuse risk as part of its bug bounty program. 

A new Malicious Domain Blocking and Reporting (MDBR) service will help organizations improve security by preventing IT systems from connecting to malicious domains. 

Recent attacks targeting QNAP Network Attached Storage (NAS) devices were attempting to exploit a vulnerability that was addressed in July 2017, 360 Netlab security researchers say. 

A recently identified adware campaign targeting macOS users is leveraging malicious code that has received Apple’s approval. 

Lack of Clarity in the Threat Intelligence Space is Causing Confusion

Cisco has warned that hackers are targeting not one, but two unpatched vulnerabilities in the DVMRP feature of IOS XR software that runs on many carrier-grade routers. 

Facebook on Tuesday said that it caught a budding Russia-linked campaign to fuel political chaos in the US, working off a tip from the FBI in its latest take-down of coordinated inauthentic behavior at the leading social network.

Norway's parliament said Tuesday it had been the target of a "vast" cyber attack that enabled hackers to access the emails of some lawmakers. The hackers' identities were not immediately known.

The American Payroll Association (APA) says user information was stolen after attackers managed to inject a skimmer on its website. A payroll education, publications, and training provider, APA helps professionals increase their skill, offering payroll conferences and seminars, resources, and certification. APA has over 20,000 members. 

Network security policy management provider FireMon announced Tuesday that it has secured $40 million in debt financing from Silicon Valley Bank (SVB).

A hacking group believed to be linked to the Iranian government was observed targeting a critical vulnerability that F5 Networks addressed in its BIG-IP application delivery controller (ADC) in early July.

Back in 2015 I wrote an article, right here in SecurityWeek, about process parity. It was a riff off the old adage "garbage in, garbage out". It seems that the article from nearly 5 years ago continues to age well, but rather than be excited about that, I'm a little disappointed. Allow me to explain.

We know that the 2020 conference experience has been different. Event after event has been postponed or cancelled. The last opportunity for IT professionals to meet up was at RSA 2020 in San Francisco, which quickly soured with the revelation of two attendees tested positive for COVID a week later. 

A security researcher was awarded a $1,750 bug bounty reward for discovering a remote code execution vulnerability in the Slack desktop applications. 

A Chinese national was arrested in the United States for destroying evidence of possible transfer of sensitive data to China. The man, Guan Lei, 29, was a researcher at the University of California, Los Angeles, and was staying in the U.S. on a J-1 non-immigrant visa. 

French President Emmanuel Macron says France is not excluding Chinese telecom giant Huawei from its upcoming 5G telecommunication networks but favors European providers for security reasons.