Page 73 - Zero Day News Today

GovInfoSecurity Insights from industry experts SonicWall Was Hacked. Was It Also Extorted? Hacker Claims SonicWall Paid Ransom; SonicWall Stays Silent Jeremy Kirk ( Twitter Inside SonicWalls headquarters in Milpitas, California. (Photo: Arctecinc) Cybersecurity companies advise their clients not to pay ransoms for good reasons: Pay once and the attackers may come back with their hand ou...

New fully automated solution enables enterprises to secure all their cloud-native applications against known and zero-day attacks, using contextual AI technology, to overcome the limitations of traditional rule based WAFs

By Ionut Arghire on February 15, 2021 Slovenia-based cybersecurity research company ACROS Security last week announced the release of an unofficial micro-patch for a zero-day vulnerability in Microsoft Internet Explorer (IE) that North Korean hackers are believed to have exploited in a campaign targeting security researchers. South Korean security vendor ENKI published a report on the IE zero-day in early February, claiming that North Korean hackers leveraged it to target its researchers with ...

The Only Surprising Thing About the Cyberattack on a Water Treatment Plant in Florida Was That It Doesn’t Happen More Often Slate 2/9/2021 Fred Kaplan © KENZO TRIBOUILLARD/Getty Images Water runs from a faucet of a water fountain. KENZO TRIBOUILLARD/Getty Images The only surprise about last week’s hacking of a water-treatment plant in Florida is that this sort of thing doesn’t happen more often. The intrusion was all too easy. The hacker entered the plant’s control ...

The only surprise about last week’s hacking of a water treatment plant in Florida is that this sort of thing doesn’t happen more often. The intrusion was all too easy. The hacker entered the plant’s control system through a commonly used tool called TeamViewer, which lets engineers monitor the network’s machines—and adjust their settings—remotely. The hacker boosted the level of lye—an ingredient in drain cleaners—from 100 parts per million, its normal level, to 11,100 parts per...

This is How They Tell Me the World Ends BY February 6, 2021 This is How They Tell Me the World Ends: The Cyberweapons Arms Race | Nicole Perlroth | Bloomsbury | February 2021. . SolarWinds and a Prelude to the End of the World At the end of 2020, the United States learned that nearly every branch of the federal government, many state and local governments, and countless companies—over 250 targets in total—had been hacked by Russian intelligence. Using the software update feature of a widely...

By Juha Saarinen on Jan 29, 2021 9:25AM Microsoft attributes campaign to familiar North Korean threat actors. The recent hacking campaign targeting penetration testers, private offensive security researchers and other infosec workers was undertaken by the North Korean state-sponsored Lazarus Group, Microsofts Threat Intelligence Centre said. Microsoft tracks the threat actors as ZINC, and based on observed techniques, malware used in the attacks, and ac...

A zero-day attack is affecting SonicWalls SMA 100 series gateway products. (Source: SonicWall) Security vendor SonicWall is investigating what the company calls a "coordinated attack" against its internal network by threat actors using a zero-day exploit within the companys remote access products. In a brief statement, SonicWall says it is continuing to investigate the incident and that users of certain versions of its Secure Mobile Access, or SMA, gateway products should apply temporary fixes ...

How attackers leveraged a watering hole attack to target Windows and Android devices (Source: Google Project Zero) Googles Project Zero security team is describing its discovery last year of a complex "watering hole" operation that used four zero-day exploits to target Windows and Android mobile devices. The attack was discovered and stopped in the first quarter of 2020, but the Project Zero team, along with Google Threat Analysis Group, did not disclose details until now because it took months...

A recent data breach at the Reserve Bank of New Zealand, known as Te Pūtea Matua, was caused by attackers exploiting a critical vulnerability patched the same day.