RSS_Virtulization

You open your laptop and see an email from a healthcare organization that you don’t recognize. The subject line reads “URGENT – PROOF OF VACCINATION NEEDED.” Impulsively, you open the email and click on the link. You’re redirected to a website that asks you to enter your name, date of birth, Social Security Number, and a photo of your vaccine card. Scrambling, you enter the information and click “Submit.”   As you continue to adapt your lifestyle to the…

Authored by ChanUng Pak   McAfee’s Mobile Research team recently found a new Android malware, Elibomi, targeting taxpayers in India. The malware steals sensitive financial and private information via phishing by pretending to be a tax-filing application. We have identified two main campaigns that used different fake app themes to lure in taxpayers. The first campaign from November 2020 pretended to be a fake IT certificate application while the second campaign, first seen in May 2021, used the fake tax-filing theme. With this discovery, the McAfee Mobile Research team has been able to update McAfee Mobile Security so that it detects this threat as Android/Elibomi and alerts mobile users if this malware…

Two new senior cybersecurity appointments have been announced by the United States Department of Homeland Security. Former lead solution engineer at Salesforce, David Larrimore, has been named as the Department’s chief technology officer. Between 2016 and 2019, Larrimore occupied the same position at the Immigration and Customs Enforcement (ICE) component. Other roles held by Larrimore include an IT manager position at the General Services Administration and a job as a cloud strategist at the United States Department…

VMworld 2021 is here with lot of exciting sessions, demos and much more. As Raghu Raghuram, CEO, VMware said- “Attending VMworld is key to understanding not only VMware’s current roadmap but also our broader strategy and forward-looking innovations. On behalf of the entire VMware team, I look forward to sharing more with you at VMworld 2021.”, this is your chance to learn more about lot of innovations VMware is bringing to the market to help you accelerate…

Another Accellion breach victim has been named nine months after threat actors exploited zero-day vulnerabilities in the company’s File Transfer Application. Beaumont Health has notified approximately 1500 patient that their personal data may have been compromised in the December attack on Accellion software.  Goodwin Procter LLP, which was hired by Beaumont to provide legal services, used Accellion’s File Transfer software to carry out large transfers on behalf of its clients. On February 5, Goodwin advised the healthcare provider that patient…

Fail2ban should be on every one of your Linux servers. If you’ve yet to install it on either Rocky Linux or AlmaLinux, Jack Wallen is here to help you out with that. Image: Anawat Sudchanham/EyeEm/Getty Images Fail2ban is one of the first pieces of software I install on Linux servers. This service will help prevent unwanted logins by banning nefarious IP addresses from gaining access to your server. Unlike installing fail2ban on Ubuntu Servers, you…

By Corey Nachreiner, Chief Security Officer, WatchGuard Technologies The threat landscape is an erratic and ever-evolving beast. While it knows no master, its behavior is broadly directed by the host of threat actors that pull on its reins from all corners of the world, constantly adapting their tactics and techniques to better sniff out points of weakness and infiltrate organizations. Businesses must stay up to date on the latest threat intelligence to understand their adversaries,…

A private university in New York State is being sued for negligence by one of its students over a data breach that may have exposed thousands of Social Security numbers. Syracuse University (SU) suffered a data breach on September 25 last year after an employee fell victim to a phishing attack and clicked on a malicious link.  The compromised account was secured by September 28, but the security incident may have exposed the names and social security…

Tech giant Apple has announced that eight US states will start accepting driver’s licenses and other state IDs that are stored on iPhones and Apple Watch. Arizona and Georgia will be the first states to allow their residents to use this system, and will be followed by Connecticut, Iowa, Kentucky, Maryland, Oklahoma and Utah. The first locations to accept IDs that are stored in iPhone Wallets will be select airport security checkpoints and lanes run…

The use of multi-factor authentication (MFA) could prevent as much as 80–90% of cyber-attacks, according to figures cited by the US national security cyber chief. Anne Neuberger, who’s deputy national security advisor for cyber and emerging technologies, said the stat was itself referenced by a number of the tech CEOs who attended a meeting with President Biden last week. MFA is one of the five key measures that Biden has mandated be rolled out across…