Page 18 - Staff Editor News Today : Breaking News, Live Updates & Top Stories | Vimarsana

A team at cybersecurity company Sixgill analyzed five underground forums, chosen for their high volume of posts, low barrier to entry, and prominence, to investigate their user count and activity. At their peak, these forums had a combined total of 268,610 unique monthly users – up from 82,421 in January. Their compounded monthly growth rate ranged from 1% to 9.2%.  While the growth can be explained by the increase in people sitting inside with the lack of other things to do, Sixgill security research lead Dov Lerner was surprised by the jump in activity. One site's growth did not hinder a...

"Just the sheer number of CVEs getting patched, especially from March to about September – we kept seeing 100 CVEs each month," Narang says. "Me and the team, we kept getting blown away by the sheer volume of them." As security teams learned this year, many vulnerabilities Microsoft found and patched affected Windows Remote Desktop Protocol (RDP) -- Microsoft's protocol for enabling users to access Windows workstations or servers -- Remote Desktop Client, Remote Desktop Services, and Remote Desktop Gateway. While these all warranted priority patching before 2020, the COVID-19 pandemic and s...

This campaign first appeared around Halloween and picked up in the beginning of November, the Cybereason Nocturnus team reports. Most targets are from the United States and Western Europe, where Amazon is very popular and people may be more likely to fall for a scam like this – especially at a time when online shopping and gift-giving is more prevalent due to COVID-19.  Victims receive an email that claims to be delivering a gift from Amazon: "We are delighted to enclose a $100 Amazon gift card as our way of saying Thank You," a sample message says. The researchers found most emails preten...

Lazarus Group Seeks Intelligence Related to COVID-19 Researchers attribute attacks targeting a pharmaceutical company and a government ministry related to COVID-19 response. Security researchers have linked Lazarus Group with two attacks targeting institutions related to COVID-19 vaccine development and response. Their data indicates the North Korea-backed group, best known for hacking for financial gain and even sabotage, is strongly interested in COVID-19 intelligence.  Related Content: The Kaspersky research team reports Lazarus Group targeted a pharmaceutical company at the end of Septem...

Microsoft Ups Security of Azure AD, Identity A roundup of Microsoft's recent security news and updates that focus on protecting identity. Microsoft's latest security announcements have focused on securing Azure AD and Identity. Updates include stronger compromise prevention for Azure AD, a zero-trust business plan, and some changes to managing user authentication in Azure Portal. Since it's a lot of news to work through, below is a recap of the highlights: Related Content: The updated Azure AD compromise prevention system, released last week, still uses supervised machine learning but expand...