Subterms
The operators of the RagnarLocker ransomware are installing the VirtualBox app and running virtual machines on computers they infect in order to run their ransomware in a “safe” environment, outside the reach of local antivirus software. This latest trick has been spotted and detailed today by UK cyber-security firm Sophos and shows the creativity and […] More
Image: Jiska Classen Academics from Germany and Italy say they developed a new practical attack that breaks the separation between Wi-Fi and Bluetooth technologies running on the same device, such as laptops, smartphones, and tablets. Called Spectra, this attack works against “combo chips,” specialized chips that handle multiple types of radio wave-based wireless communications, such […] More
Palo Alto Networks reported strong fiscal third quarter results as its security platform got a boost due to remote work. The company reported a third quarter net loss of $74.8 million, or 77 cents a share, on revenue of $869.4 million, up 20% from a year ago. Non-GAAP earnings for the quarter were $1.17 a […] More
The organizers of the RSA cyber-security conference have announced this week plans to reschedule next year’s event, citing public health and safety concerns brought on by the current global coronavirus (COVID-19) pandemic. “RSA Conference has elected to move its 2021 event from February to the week of May 17, 2021,” said Linda Gray Martin, Sr. […] More
UK cyber-security vendor Sophos published today an update on its investigation into a recent series of attacks that tried to exploit a zero-day vulnerability in its XG firewall product. Sophos said that after they learned of the incident and issued a hotfix, the attackers panicked and modified their attack routine to replace their original data-stealing […] More
For years, there’s been a known security vulnerability hiding in the GNU C Library (glibc). This library, which is critical for Linux and many other operating systems and programs, had a dynamic memory management security hole that could be used for denial of service (DoS) attacks. Now, the security company, Check Point, has issued an […] More
Organizations using Cisco’s call-center platform, Unified Contact Center Express (Unified CCX), should update the software urgently, Cisco has warned. The company has released updates for the Unified CCX platform to address a critical deserialization vulnerability in its Java-based remote management interface, which could allow a remote attacker without credentials to install malware on the device. […] More
Thousands of Israeli websites have been defaced earlier today to show an anti-Israeli message and with malicious code seeking permission to access visitors’ webcams. More than 2,000 websites are believed to have been defaced. Most of the websites were hosted on uPress, a local Israeli WordPress hosting service. In a message posted on Facebook, the […] More
