data exfiltration

US Sanctions Chinese Cybersecurity Firm for Ransomware Attack

Posted on by Admin
US Sanctions Chinese Cybersecurity Firm for Ransomware Attack

The U.S. has sanctioned Sichuan Silence, a Chinese cybersecurity firm involved in ransomware attacks targeting critical infrastructure in 2020. One of its employees, Guan Tianfeng, has also been charged individually. Guan, a security researcher, discovered a zero-day vulnerability in a firewall product developed by U.K.-based security firm Sophos. He exploited the vulnerability, designated CVE 2020-12271, using a SQL injection attack that retrieved and remotely executed a script from a malicious server. Guan and his co-conspirators…

Read More

The Countdown Has Begun: Getting Started on Your Post-Quantum Journey

Posted on by Admin
The Countdown Has Begun: Getting Started on Your Post-Quantum Journey

If you’re involved in network security, you’ve likely heard about the threat of quantum computers and the need for post-quantum cryptography (PQC). What you may not be so familiar with is the immediacy of the risk. “Q-Day” is coming — a moment when cryptanalytically relevant quantum computing (CRQC) will be able to break all public-key cryptography systems in operation today. Malicious actors are harvesting encrypted data that they anticipate decrypting once Q-Day arrives. Known as…

Read More