Page 19 - Customer Security News Today

Russia-based Nobelium, the group that also pulled off the SolarWinds hack, gained access to the Constant Contact account of the USAID to send more than 3,000 phishing emails to 150 organizations.

Thinkstock The Russian hacking group behind the supply chain attack that poisoned software updates for the SolarWinds Orion platform has been perfecting its email-based attacks over the past few months to plant backdoors inside organizations. These efforts recently escalated with an attack launched from a hijacked email marketing account belonging to USAID and targeted around 3,000 people across over 150 organizations in 24 countries. The hacking group, known in the security indu...

How information sharing can help organisations strengthen their cyber defences 27 May 2021 Keeping pace with attackers The nature and impact of fraud across industry sectors has evolved significantly as adversaries have advanced their knowledge, with tactics, techniques and procedures continuing to change. Attackers are well-resourced, and racing to make use of new technologies. Organisations also need to remain vigilant to keep pace; for companies across the world cybersecurity is a pressing c...

How information sharing can help organisations strengthen their cyber defences 26 May 2021 Keeping pace with attackers The nature and impact of fraud across industry sectors has evolved significantly as adversaries have advanced their knowledge, with tactics, techniques and procedures continuing to change. Attackers are well-resourced, and racing to make use of new technologies. Organisations also need to remain vigilant to keep pace; for companies across the world cybersecurity is a pressing c...

Some Bangladeshi organisations running Microsoft Exchange mail servers have been compromised by cyberattacks, says the e-Government Computer Incident Response Team (BGD e-GOV CIRT) in an advisory. It named a few business groups that have already been compromised and asked others to check their systems. The advisory mentioned the name of HAFNIUM, a Chinese hacker group, which has carried out such attacks across the globe. The BGD e-GOV CIRT has asked a number of state-owned and private organisat...

TrickBot rises to top threat in February, overtaking Emotet in Check Point’s new index. A massive malicious spam campaign, along with the global takedown of Emotet, has vaulted the TrickBot trojan to the top of the Check Point’s list of the most popular malware among cybercriminals for February. In January, TrickBot was ranked third on Check Point’s list, and it was fourth overall for 2020, while the No. 1 malware, Emotet, remained ascendant. But following the worldwide law-enforcement ef...

Cyberattack on the European Banking Authority linked to Microsoft Exchange hack. A full investigation has been launched.

JSW Steel gets lenders nod to close Bhushan Power deal In yet another big cyber-attack after SolarWinds, at least 30,000 organisations across the US, including government and commercial firms, have been hacked by China-based threat actors who used Microsofts Exchange Server software to enter their networks. According to KrebsOnSecurity, the China-based espionage group exploited four vulnerabilities in Microsoft Exchange Server email software. The vulnerabilities allowed hackers to gain access t...

Two cybersecurity experts who have briefed US national security advisors on the attack told KrebsOnSecurity the Chinese hacking group seized control over "hundreds of thousands" of Microsoft Exchange Servers worldwide.

Read more about Microsoft warns customers against new China cyber attack on exchange email on Business Standard. Microsoft has warned its customers against a new sophisticated cyber attack that has its origin in China and is primarily targeting on-premises Exchange Server software of the tech giant