Page 154 - Recorded Future News Today

Congress will consider whether to require companies – or government agencies – to disclose breaches.

Microsoft today released updates to plug more than 80 security holes in its Windows operating systems and other software, including one that is actively being exploited and another which was disclosed prior to today. Ten of the flaws earned Microsoft's most-dire "critical" rating, meaning they could be exploited by malware or miscreants to seize remote…

Microsoft has patched a zero-day bug in Windows Defender being actively exploited in the wild, as part of its monthly update round. The first Patch Tuesday of 2021 featured fixes for 83 vulnerabilities in Windows OS, Edge, Office, Visual Studio, .Net Core, .Net Repository, ASP .Net, Azure, Malware Protection Engine and SQL Server. Remote code execution bug CVE-2021-1647 is the most urgent, according to Chris Goettl, director of product management for security products at Ivanti. He recommended...

Critical zero-day features in first Patch Tuesday of 2021 Microsoft releases fixes for 84 bugs on the first Patch Tuesday of 2021, including a critical zero-day vulnerability in Microsoft Defender Share this item with your network: By Published: 13 Jan 2021 9:35 Microsoft has released fixes for 84 vulnerabilities, 10 of them critical, one publicly disclosed, and one zero-day that is already being exploited in the wild, in its first monthly security drop of 2021, with patches incoming for W...

minute read Share this article: Researchers at Recorded Future report a rise in cracked Cobalt Strike and other open-source adversarial tools with easy-to-use interfaces. Simple to use and deploy offensive security tools, making it easier than ever for criminals with little technical know-how to get in on cybercrime are seeing a significant rise, researchers say. Recorded Future just released findings from its regular year-end observations of malicious infrastructure, identifying m...

How the Shady Zero-Day Sales Game Is Evolving Zero-day vulns are cold, while access-as-a-service is hot. Heres how black market (and gray market) deals go down. (Image: chanut via Adobe Stock) One of the software success stories of the COVID-19 pandemic era has been videoconferencing service Zoom. Despite already existing in a crowded field of both startups and mature competitors, Zoom became a household name for anyone stuck at home to avoid the coronavirus. But as Zoom boomed, so did Dark W...

. government information security

Researchers with Recorded Futures Insikt Group collected more than 10,000 unique C2 servers across at least 80 malware families last year. Cobalt Strike accounted for 1,441 of the C2 servers and Metasploit made up 1,122; combined, they made up 25% of the total C2 servers. Detections of unaltered Cobalt Strike deployments represented 13.5% of C2 servers identified.  Offensive security tools, also known as penetration testing tools and red teaming tools, have become part of attackers toolkits in...

Ransomware Victims Data Published via DDoSecrets Activists behind Distributed Denial of Secrets has shared 1TB of data pulled from Dark Web sites where it was shared by ransomware attackers. A group of data activists called Distributed Denial of Secrets (DDoSecrets) has begun publishing a massive amount of corporate information leaked by ransomware operators on the Dark Web. Related Content: So far DDoSecrets has shared 1TB of information with at least 750,000 emails, photos, and documents from...

Millions of people awaiting their turn to receive newly-released COVID-19 vaccines. But delays in getting vaccines to the public have led to a growing number of online scams claiming to offer the shots to anyone willing to pay the right price.