cyberscoop.com · News

News listings from cyberscoop.com on TechiSeek. 990 public listings.

• Top insurer CNA disconnects systems after cyberattack (cyberscoop.com)
  It could be a "nightmare scenario" for CNA and others if hackers get ahold of policyholder information.
• China-based hackers used front companies to hack Uighurs, Facebook says (cyberscoop.com)
  Facebook’s investigators traced the Android developers to Beijing Best United Technology and Dalian 9Rush Technology.
• Federal advisories detail bitcoin payments to ransomware gangs, urgency of threat (cyberscoop.com)
  Treasury recently warned that helping to pay ransomware to any entity on its cyber sanctions list could incur civil penalties.
• US racing to address Microsoft vulnerabilities, especially for small businesses (cyberscoop.com)
  The number of entities in the U.S. that remain vulnerable to the Microsoft flaws is dropping, the National Security Council said.
• Energy giant Shell impacted in Accellion hack (cyberscoop.com)
  Oil and gas company Shell is the latest organization to get caught up in the hack targeting Accellion’s file-sharing platform.
• Thousands of Exchange servers breached prior to patching, CISA boss says (cyberscoop.com)
  “Patching is not sufficient,” Brandon Wales said.
• Industrial giant Honeywell says it has ‘returned to service’ after cyber intrusion (cyberscoop.com)
  Ransomware attacks have been reported with increasing frequency in the manufacturing sector in the last year.
• COVID-19 vaccine scammers are still lurking (cyberscoop.com)
  Scams looking to take advantage of people attempting to get vaccinated against the coronavirus are on the rise, according to Unit 42.
• CISA orders US agencies to address Microsoft flaws exploited by suspected Chinese hackers (cyberscoop.com)
  Agencies have until Friday to report back to CISA on their level of exposure.
• Two Infraud members sentenced for role in $568 million crime gang, US says (cyberscoop.com)
  A third suspect is still at large.
• SpaceX engineer makes a first with dark web securities violations case (cyberscoop.com)
  Who says securities fraud is easier than rocket science?
• Verkada breach spotlights ongoing concerns over surveillance firms' security (cyberscoop.com)
  Who's watching the watchers?
• Russian man pleads guilty to Tesla hacking plot (cyberscoop.com)
  A 27-year-old Russian has pleaded guilty for working to recruit a Tesla employee to hack the Nevada-based company last year.
• Finland implicates China-linked APT31 in parliament hack (cyberscoop.com)
  It's only the latest case of alleged cyber-espionage to rock a Nordic parliament.
• DNS hacks are attacks on critical infrastructure, senior U.S. diplomat says (cyberscoop.com)
  Amb. Robert Strayer said if the recent spate of DNS hijackings are nation-state-baseds, they are no different than any other attacks on cri…
• Embassies targeted in ongoing spearphishing campaign that weaponized Microsoft Excel files (cyberscoop.com)
  Embassies around the world have been targeted in a recent spate of spearphishing email attacks from Russian hackers, according to Check Poi…
• U.S. Cyber Command has shifted its definition of success (cyberscoop.com)
  The success of Cyber Command can be measured in actions taken by other government agencies, according to Brig. Gen. Timothy Haugh.
• Patient PII exposed in leak of Pennsylvania-based rehab center records (cyberscoop.com)
  Patient names, their rehab care provider, and specific procedures they received were among the information sitting in the insecure database.
• Someone is spoofing big bank IP addresses – possibly to embarrass security vendors (cyberscoop.com)
  The large-scale effort is duping people into thinking that the IP addresses are malicious.
• Marcus Hutchins pleads guilty to two counts related to Kronos banking trojan (cyberscoop.com)
  Also known as MalwareTech, British cybersecurity researcher Marcius Hutchins was responsible for stopping the WannaCry ransomware outbreak…
• Anonymous offshoots rush to avenge Assange arrest with cyberattacks (cyberscoop.com)
  Anonymous has relied on DDoS attacks for a generation to harass the public and private sector organizations the group has determined violat…
• Millions of records about Middle Eastern drivers left in an insecure database (cyberscoop.com)
  The database contains many instances where the same person is referenced by multiple records.
• How companies – and the hackers themselves – could respond to the OilRig leak (cyberscoop.com)
  Hacking tools apparently used by OilRig have been publicly leaked, exposing the hackers’ malicious code, IP addresses, and alleged victims.
• Mueller report confirms Trump lobbied top intel officials to refute Russia stories (cyberscoop.com)
  President Donald Trump pushed top intelligence officials to refute information tied to the investigations into links between his 2016 presi…
• Ongoing state-sponsored DNS hijacking campaign has compromised 40 entities (cyberscoop.com)
  Using the DNS records, attackers are capable of rerouting user traffic and stealing credentials from what appears to be a legitimate websit…
• Facebook security notice announces millions of Instagram users had their passwords stored in (cyberscoop.com)
  The update increases the amount of people impacted by a March security notice.
• Researchers suggest Gorgon Group behind hacking spree that abused Bit.ly and Blogspot (cyberscoop.com)
  The campaign may have originated with hackers in Pakistan.
• Quasi-Russian upstart reportedly targeted Ukraine in cyber-espionage campaign (cyberscoop.com)
  The campiagn is linked to the Luhansk People’s Republic, a group that declared independence from Ukraine in 2014.
• Alleged Methbot scammer Zhukov asks judge for new attorney in ad fraud case (cyberscoop.com)
  In a letter, Alexander Zhukov said he felt "helpless and alone" against the U.S. government's case.
• Scammers are selling 3.2 million payment records stolen from Indian cardholders (cyberscoop.com)
  Researchers analyzed roughly 60 underground markets for payment-card data. All of them sold Indian card data.
• PPD-20 successor has yielded ‘operational success,’ Federal CISO says (cyberscoop.com)
  A revamped policy framework for offensive U.S. cyber operations is much quicker than its predecessor, federal CISO Grant Schneider said Tue…
• Brazilian 'pirates' sail around two-factor authentication to vex banking sector (cyberscoop.com)
  Brazil's underground digital bazaar is host to opportunistic "pirates," some who are quite skilled, Recorded Future says.
• How an annual ‘Cyber Shield’ drill helps the National Guard secure elections (cyberscoop.com)
  The drill has grown way beyond its humble beginnings to include over 800 people from the Guard, private sector, and law enforcement.
• Fortinet settles charges of selling intentionally mislabeled Chinese-made tech to U.S. military (cyberscoop.com)
  Fortinet acknowledged that an employee altered labels on products to make them appear compliant a law prohibiting federal agencies from acq…
• DHS alerts industry to insecure enterprise VPN apps (cyberscoop.com)
  The bug affects at least 4 enterprise VPN vendors.
• Shimo VPN service contains six unpatched vulnerabilities, Talos discovers (cyberscoop.com)
  Details of the vulnerabilities were released after Cisco made “repeated attempts” to communicate with Shimo over 90 days to no avail, Talos…
• Microsoft email breach gave hackers access to account information for months (cyberscoop.com)
  Hackers were able to access email content from “a large number” of Outlook, MSN, and Hotmail email accounts, Motherboard reported.
• Axonius raises $13 million in series A funding (cyberscoop.com)
  Axonius announced a $13 million series A funding Tuesday, led by Bessemer Venture Partners, with participation from YL Ventures, Vertex, WT…
• Why bug bounty firms want to be penetration testing companies (cyberscoop.com)
  Bug bounty companies certainly seem to realize a shift is underway. A number of them have pivoted to offering penetration testing services.
• U.S. jury finds two Romanians guilty of stealing credit card info, infecting 400,000 computers (cyberscoop.com)
  The two men also allegedly stole millions of dollars through online auction fraud.
• U.K. fines company that collected data from new moms, then sold it to Equifax (cyberscoop.com)
  Bounty UK collected information from new mothers, mothers-to-be, as well as the birth dates and genders of young children, according to the…
• An attempted password crack was enough for a U.S. indictment against Julian Assange (cyberscoop.com)
  Assange is charged with violating the Computer Fraud and Abuse Act because he participated in the theft of documents, the Department of Jus…
• U.S. government issues warning about new North Korea-linked malware (cyberscoop.com)
  DHS and FBI officials are warning industry about what they say is North Korean-liked malware that's been deployed as part of their global o…
• Newly uncovered malware uses DNS requests to sneak away with credit card data (cyberscoop.com)
  Researchers have discovered new malware that relies on a unique way to steal credit card information from point-of-sale systems.
• Symantec reveals state-sponsored group that doesn’t care for malware (cyberscoop.com)
  The hacking group, dubbed "Gallmaker," has been going after diplomatic and military targets in a campaign that researchers say is difficult…
• Corporate giants want to help students, feds and themselves by offering cyber pros $75,000 in loan (cyberscoop.com)
  The Cyber Talent Initiative appears to be unique in the way it offers student loan assistance, but it’s hardly the only corporate effort me…
• Microsoft hurries to patch 'worst' Windows vulnerability (cyberscoop.com)
  Microsoft has rushed out a self-installing patch for a vulnerability in a Windows security program that allows hackers to take over a compu…
• Menlo Security raises $40 million in Series C round (cyberscoop.com)
  Menlo Security announced a $40 million Series C funding round, with money coming in from American Express Ventures, Ericsson Ventures and H…
• New Space ISAC plans to elevate the industry's awareness of cyberthreats (cyberscoop.com)
  The Space Information Sharing and Analysis Center (S-ISAC) will be housed in Colorado Springs, Colorado, within the National Cybersecurity…
• New APT group TajMahal operates as a 'full-blown spying network,' Kaspersky says (cyberscoop.com)
  Researchers have only identified a diplomatic entity from a country in Central Asia as the victim, though its likely others exist.