Eye Mandiant News Today

In the first half of 2021, the number of organizations impacted by ransomware across the globe has more than doubled compared with 2020. Why the surge and how vulnerable is the U.S. to a major cyber attack?

Inside DarkSide: Researchers share intel on break-out cyber gang Security researchers swap information on the newly famous DarkSide ransomware gang, the group that doesn’t appear to understand what ‘being a criminal’ actually means Share this item with your network: By Published: 12 May 2021 14:00 In the wake of the Colonial Pipeline ransomware attack – which continues to disrupt supplies of fuel across the eastern and southern US – threat researchers from across the cyber commun...

Managed Detection and Response (MDR) services can be the solution for companies in need of security help. Learn more about MDR.

SonicWall Patches 3 Zero-Day Flaws Compliance Twitter SonicWalls headquarters in Milpitas, California (Photo: Arc Tec Inc.) SonicWall has patched three zero-day vulnerabilities in the hosted and on-premises versions of its Email Security product after attackers began exploiting them last month. FireEye Mandiant, which uncovered the flaws, says it has seen attackers using the three vulnerabilities to place web shells, or remote access scripts, on systems. That access can then be used to access...

Qualys Is the Latest Victim of Accellion Data Breach Security vendor confirms attackers exploited a previously disclosed vulnerability in the enterprise firewall technology to breach its network. Qualys has become the latest known victim of a data breach at enterprise firewall vendor Accellion that has affected numerous companies including, most notably, retail giant Kroger, law firm Jones Day, and the state of Washington. In a statement late Wednesday, Qualys confirmed rumors that had been cir...

Emergency patch addresses MS Exchange Server zero-days Microsoft releases an emergency patch to address multiple zero-day exploits directed at on-premise installations of Exchange Server Share this item with your network: By Published: 03 Mar 2021 12:30 Organisations using on-premises versions of Microsoft Exchange Server are at risk of targeted attacks exploiting three newly-disclosed zero-day exploits, which are already being taken advantage of by malicious actors associated with the Chi...

Accellion on January 12 briefly disclosed that attackers had exploited a zero-day vulnerability in its File Transfer Appliance (FTA), a near-obsolete 20-year-old technology that enterprise organizations around the world have been using for years  to transfer large files. The vendor said it had learned of the breach in mid-December and issued a patch for it in less than 72-hours. A subsequent—and similarly brief—update on Feb 1, suggested that the attackers had exploited not one, but severa...