RSS_Virtulization

The zero-day vulnerability known as PrintNightmare now has an official CVE listing, but Microsoft is still investigating the severity of the bug. The public disclosure of the flaw came about in a comedy of errors this week. A Chinese research team at QiAnXin announced exploit code for a similar remote code execution (RCE) vulnerability in the Windows Print Spooler service (CVE-2021-1675), which Microsoft had patched in June. Mistaking this code for a project that they had been working on,…

Scammers are increasingly resourceful when coming up with scam techniques. But they often rely on long-standing persuasion techniques for the scam to work. So, you may hear about a new scam that uses a novel narrative, but there is a good chance that the scam relies on proven scam techniques once the narrative is stripped away. These scam techniques often exploit our characteristics and heuristics, or things that make us human and fallible. In this…

The US and UK authorities have issued a new warning of state-sponsored Russian threat activity, focused on stealing information from global targets. The new NSA, CISA, NCSC and FBI alert attributes the campaign, which has been ongoing since mid-2019, to military intelligence outfit APT28 (aka Fancy Bear, Strontium). The threat actors use a Kubernetes cluster to conduct “distributed and large-scale targeting using password spray and password guessing”. These brute force attempts to crack credentials are routed through…

A new massive LinkedIn breach made the headlines, the leak reportedly exposes the data of 700M users, more than 92% of the total 756M users. A new massive LinkedIn breach made the headlines, a database containing data of 700M users, more than 92% of the total 756M users, is available for sale on forums on the dark web. The exposed records include email addresses full names, phone numbers, physical addresses, geolocation records, LinkedIn username and…

By Kate Orekhova, Cleveroad company Health organizations deal with a large amount of sensitive personal information. That’s why they face challenges complying with tightening regulations, and they’re constantly combating increased cyber risks and adapting to digital transformation. The healthcare institutions have to prove that technologies and methods they adopted keep patients’ personal information secure and bring no risks. And using recognized standards and frameworks is a great decision. In this guide, we discuss how to…

The United States has filed additional charges against a former Amazon employee accused of stealing the personal data of more than 100 million Americans and six million Canadians. A superseding indictment filed in June accuses former software engineer Paige A. Thompson of seven new charges relating to the hack of Capital One. Six of the charges relate to computer fraud and abuse and one relates to access device fraud. Capital One announced in 2019 that “unauthorized access by an…

A survey of business professionals by Armis points to a lack of knowledge about recent incidents and proper cyber hygiene. Image: Yuichiro Chino/Moment/Getty Images One of the key ways to defend your organization against cyberattacks involves your own employees. In order to protect themselves and your business against phishing campaigns, malware and other types of attacks, your workers should have a certain awareness of cyber incidents and more importantly security best practices. But a recent…

A Romanian, accused of helping to distribute a computer virus that infected over a million machines, has been arrested in Colombia.  Suspected cyber-criminal Mihai Ionut Paunescu is wanted in the United States for allegedly playing a role in the dissemination of the Gozi virus. The virus, which ravaged computers in at least eight different countries between 2007 and 2012, was used to steal money from victims’ bank accounts.  Prosecutors in New York claim that Paunescu was a member of…