Items tagged with cybersecurity
by
Nathan Ord - Sun, Apr 11, 2021
Information scraping campaigns are becoming more prevalent, it seems, with LinkedIn recently losing data for 500m million users. Facebook also faced a similar issue with its phone contact search feature, which allowed malicious parties to...
Read more...
by
Nathan Ord - Fri, Apr 09, 2021
With everyone using Zoom for both work and school, a vulnerability in the software can be especially concerning. This week, researchers competing in a zero-day hunting competition found a bug in Zoom that allowed them to remotely execute...
Read more...
by
Nathan Ord - Sat, Apr 03, 2021
Late last month, we reported on a trend of rising cybersecurity incidents worldwide that could lead to the end of some businesses. Now, the latest cyberattack victim is Microsoft-owned GitHub, with reports of cybercriminals leveraging...
Read more...
by
Nathan Ord - Mon, Mar 29, 2021
Security breaches and data loss have been rampant problems for companies in recent years, with it seeming like there was a new victim every week. These security issues have also had some dire consequences, such as the first possible...
Read more...
by
Nathan Ord - Fri, Mar 26, 2021
Cell phones are a necessity in day-to-day life, allowing communications and access to numerous websites and accounts. Thus, losing access to a phone or text messages could be as bad, if not worse, than losing a credit card. Even more...
Read more...
by
Nathan Ord - Wed, Mar 24, 2021
Black Hat hackers, or simply cybercriminals, can be effective in stealing, leaking, or encrypting data in efforts to extort money from organizations. With the advent of the ProxyLogon vulnerabilities for Microsoft Exchange servers...
Read more...
by
Nathan Ord - Mon, Mar 22, 2021
This month, Microsoft Exchange vulnerabilities have been cropping up, and bad actors are looking to take advantage of them. It has been rumored, yet not confirmed, that the recent Acer hack stemmed from the Microsoft Exchange...
Read more...
by
Nathan Ord - Sat, Mar 20, 2021
Earlier in the month, brewer Molson Coors was allegedly hit by a ransomware attack under the guise of a “cybersecurity incident.” Now, Taiwanese computer manufacturer Acer has reportedly been hit by a REvil ransomware gang attack, and the...
Read more...
by
Nathan Ord - Fri, Mar 19, 2021
Zoom has become one of the most popular video conferencing solutions for working and learning from home since the start of the COVID-19 pandemic. Given that the platform is so popular, it is not surprising that security flaws pop up from...
Read more...
by
Nathan Ord - Fri, Mar 12, 2021
Over the last nearly two weeks, we have seen Microsoft deploying emergency patches and telling companies to secure Exchange servers due to Chinese hackers exploiting a 0-day vulnerability. When vulnerabilities such as this are published...
Read more...
by
Nathan Ord - Thu, Mar 11, 2021
Earlier in the week, hackers gained access to over 150,000 Verkada customer camera feeds that allowed them to grab screenshots and video clips. This breach happened because of a “Super Admin” account that was able to view any camera feed...
Read more...
by
Nathan Ord - Wed, Mar 10, 2021
In January, Google warned security researchers about sneaky social engineering and hacking attempts coming from North Korea. Originally, the Google Threat Analysis Group (TAG), and other researchers found that the North Korean hacker’s...
Read more...
by
Nathan Ord - Tue, Mar 09, 2021
Over the last couple of weeks, hackers have been out in force, breaking into Microsoft Exchange and other services. Now, a group of international hackers who view themselves as vigilantes have breached Silicon Valley-startup Verkada Inc...
Read more...
by
Nathan Ord - Mon, Mar 08, 2021
Today, Intel signed an agreement with the Defense Advanced Research Projects Agency (DARPA) to "perform in its Data Protection in Virtual Environments (DPRIVE) program." This means that the company will now be working on fully homomorphic...
Read more...
by
Nathan Ord - Fri, Mar 05, 2021
When we report on cybersecurity breaches, all too often it involves innocent individuals (or companies) that are on the receiving end of the attack. Such is the case with Chinese hackers that exploited Microsoft Exchange servers. Now, it...
Read more...
by
Nathan Ord - Thu, Mar 04, 2021
When someone resets a password, a code is typically sent to an account holder's email, which is then input into a website (or app) for verification purposes. Moreover, protections should prevent that code from being brute-forced by a...
Read more...
by
Nathan Ord - Fri, Feb 26, 2021
Now that Microsoft’s investigation into the Solorigate hack has concluded, it is time to pick up the pieces and plot a [secure] path forward. In doing this, Microsoft has internally utilized several tools, including CodeQL, to hunt for...
Read more...
by
Nathan Ord - Sun, Feb 21, 2021
The Solorigate hack, which ensnared Microsoft, is finally coming to a close for the Redmond, Washington-based company. The Microsoft Security Response Center (MSRC) team wrote a blog post explaining what they had found in the now-completed...
Read more...
by
Nathan Ord - Mon, Feb 15, 2021
Since December, a breach at I.T. administration and monitoring software company SolarWinds has been unfurling to reveal several serious security issues. Many companies and government organizations had data accessed and perhaps even stolen...
Read more...
by
Nathan Ord - Fri, Feb 12, 2021
As long as computers have been around, there have been hackers who have progressively improved and become sneakier at exploiting them. Last year, Microsoft used Microsoft 365 Defender data to find that web shell attacks, which are simple...
Read more...
by
Nathan Ord - Wed, Feb 10, 2021
Internet of Things (IoT) devices are prevalent in our daily lives, from voice-control hubs to smart cooking devices. Millions of these types of devices exist in people's homes, and many could have been vulnerable to significant security...
Read more...
by
Nathan Ord - Tue, Feb 09, 2021
Some of the United State’s most critical infrastructure are incredibly vulnerable to attack, as we are now finding out. Last Friday, a plant operator at a water treatment facility in Oldsmar, Florida, noticed his mouse dashing around on...
Read more...