India's National Critical Information Infrastructure Protection Center remains vulnerable. (Image: ISMG)

Indian Critical Infrastructure Protection Center Vulnerable

Akshaya Asokan • February 23, 2021

Multiple critical vulnerabilities that could enable hackers to access sensitive data have been found in India's National Critical Information Infrastructure Protection Center, and most of them remain unpatched, says ethical hacking group Sakura Samurai.

Cybercrime

Data Breaches: ShinyHunters' Dominance Continues

World Health Organization CISO on Supply Chain Risk

Latest

Cybercrime

Russian Hacking Group Deploys IronPython Malware Loader

Akshaya Asokan • February 24, 2021

The Russian hacking group known as Turla is deploying a new IronPython-based malware loader called "IronNetInjector" as part of a new campaign, Palo Alto Networks' Unit42 reports. It comes with capabilities to obfuscate malware codes and encrypt and decrypt NET injector and payloads.

Fraud Management & Cybercrime

Updated Minebridge RAT Targets Security Researchers

Theo Nassiokas, Head of Technology, Governance & Risk Controls, Westpac Group • February 24, 2021

The operators behind the Minebridge remote-access Trojan have updated the malware, which is targeting security researchers by using a malicious payload disguised in an attached document, according to the security firm Zscaler.

3rd Party Risk Management

Senators Grill Cybersecurity Execs on SolarWinds Attack

Doug Olenick • February 23, 2021

The CEOs of SolarWinds, Microsoft, FireEye and CrowdStrike rolled out a series of cybersecurity recommendations to a U.S. Senate panel Tuesday while detailing how foreign actors gained access into their firms' systems as a result of the SolarWinds supply chain attack.

Application Security

Python Software Rushes to Tackle RCE Vulnerability

Prajeet Nair • February 23, 2021

The Python Software Foundation is issuing updates for Python 3.9.2 and 3.8.8 to address critical security vulnerabilities, including a remote code execution vulnerability that can be exploited to shut down systems.

Critical Infrastructure Security

Ukraine Blames Russia for DDoS Attack on Defense Websites

Prajeet Nair • February 23, 2021

The National Security and Defense Council of Ukraine accuses Russia of turning Ukrainian government servers into a botnet for massive distributed denial-of-service attacks that then caused the servers to be blocked.

Cybercrime

Silver Sparrow Malware Infects 30,000 Macs

Doug Olenick • February 23, 2021

A previously undetected malware variant has infected almost 30,000 Apple Macs. So far, however, researchers have not seen the code, called Silver Sparrow, deliver any malicious payloads to these endpoints, according to a new report.

Governance & Risk Management

US Marine Corps Looks to Expand Insider Threat Program

Scott Ferguson • February 23, 2021

The U.S. Marine Corps looks to expand its insider threat program and seeks proposals to include activity monitoring technology on its enterprise and classified networks. The goal is to give the Marines greater ability to monitor network traffic and stop insiders from exposing data.

Anti-Phishing, DMARC

France Warns of Stolen Healthcare Credentials

Marianne Kolbasuk McGee • February 23, 2021

French authorities are warning the country's healthcare sector of the discovery of a glut of stolen credentials, apparently belonging to hospital workers, that were found for sale on the dark web. The alert comes amid a recent rise in ransomware attacks on hospitals and other healthcare entities.

Application Security

Fraudsters Using Telegram API to Harvest Credentials

Prajeet Nair • February 22, 2021

A newly-discovered phishing campaign posts harvested credentials using the Telegram messaging app's application programming interface to bypass secure email gateways, report researchers at the Cofense Phishing Defense Center.

Cybercrime

Chinese Hacking Group 'Cloned' NSA Exploit Tool

Scott Ferguson • February 22, 2021

A Chinese hacking group reportedly "cloned" and deployed a zero-day exploit developed by the NSA's Equation Group before Microsoft patched the Windows flaw being exploited, according to Check Point Research. The analysis shows how some U.S. cyber weapons have been turned against their developers.

Anti-Phishing, DMARC

Sequoia Capital Investigating 'Cybersecurity Incident'

Prajeet Nair • February 22, 2021

Venture capital firm Sequoia Capital confirmed it was recently involved in a "cybersecurity incident," but offered no details on exactly what may have transpired. Cybersecurity teams and law enforcement agencies have been notified.

Business Continuity Management / Disaster Recovery

Creating a Digital ID to Verify COVID-19 Testing

Nick Holland • February 22, 2021

The Good Health Pass Collaborative is developing a road map for digital health passes that international travelers could use to prove they have been tested for COVID-19. Dakota Gruener, executive director of ID2020, which launched the project, describes the effort, including privacy-protection measures.