Roundtable Wrap News Today : Breaking News, Live Updates & Top Stories | Vimarsana

An timeline illustrating a Raindrop infection (Source: Symantec Threat Intelligence ) Symantec Threat Intelligence says it has uncovered another malware variant used in the SolarWinds supply chain hack - a loader nicknamed "Raindrop" that apparently was used to deliver Cobalt Strike, a legitimate penetration testing tool, to a handful of targets. Raindrop is the fourth malware variant identified as being used during the attack that targeted SolarWinds’ Orion network monitoring software. The others are Teardrop, Sunspot and Sunburst. Symantec says Raindrop is similar to the already documente...

Photo: Virginia National Guard As thousands of National Guard troops pour into Washington to provide security for the Jan. 20 inauguration of Joe Biden as president, cybersecurity analysts are calling attention to the need to defend against cyber incidents as well. "I expect there is some elevated risk of a cybersecurity attack, especially from those who want to demonstrate the country is in chaos and to undermine democracy," says Phil Reitinger, a former director of the National Cyber Security Center who’s now president and CEO of the Global Cyber Alliance. Security experts say potential ...

Get Permission A new leaks site claims to be selling data from Cisco, FireEye, Microsoft and SolarWinds that was stolen via the SolarWinds supply chain attack. While all four organizations are confirmed victims, security experts question whether the offer is legitimate and note that it parallels previous efforts, including by Russia, designed to foil hack attack attribution. The appearance of the leaks website comes just four weeks after cybersecurity firm FireEye discovered and issued a public alert, warning that Texas-based SolarWinds' Orion network monitoring software had been backdoored...

An underground advertisement for the "Rogue" mobile remote access Trojan (Source: Check Point Research) A recently identified mobile remote access Trojan dubbed "Rogue," which exploits Google's Firebase development platform, targets Android devices to exfiltrate personal data and can deliver other malware, according to the security firm Check Point Research. The Rogue RAT is being offered for sale or rent in darknet forums, Check Point says in its new report. Once a hacker uses the Trojan, portrayed to victims as a legitimate app, to infect a device, the malware can exfiltrate data, such as p...

Protesters gather outside the U.S. Capitol on Jan. 6, 2021. (Photo: TapTheForwardAssist via Wikipedia/CC) A security researcher based in Vienna led a fast-paced, crowdsourced effort to archive posts, videos and images from the social network Parler after rioters on Wednesday violently stormed the U.S. Capitol. Parler, launched in 2018, was modeled on Twitter but with a self-proclaimed focus on "free speech." It has been "adopted by American conservatives as an alternative to mainstream social media platforms," says threat intelligence firm Recorded Future. Following the November 2020 U.S. el...