Latest

Endpoint Security

Millions of Dell Devices Vulnerable to Update Driver Flaw

Jeremy Kirk  •  May 5, 2021

Dell has patched five issues in a firmware update driver that has shipped in millions of laptops, tablets and desktops since 2009. The vulnerabilities apparently have not been exploited in the wild and are not remotely exploitable.

Governance & Risk Management

PHP Composer Flaw That Could Affect Millions of Sites Patched

Prajeet Nair  •  May 5, 2021

A patch has been issued for a serious vulnerability that affects PHP Composer - a tool used to manage and install software dependencies in the PHP ecosystem. Security researchers at SonarSource say the flaw could put millions of websites at risk.

►

Business Continuity Management / Disaster Recovery

Ransomware: Reducing the Risk to Universities

Anna Delaney  •  May 4, 2021

In light of the surge in ransomware attacks against universities, institutions need to make asset management a much higher priority, removing obsolete systems and upgrading essential systems to the latest version to avoid exploits of unpatched vulnerabilities, says Matthew Trump of the University of London.

Encryption & Key Management

Researcher Finds New Vulnerabilities in Cellebrite's Tools

Jeremy Kirk  •  May 3, 2021

Can courts trust evidence collected by Cellebrite's mobile device forensic tools? Matt Bergin of KoreLogic has found new vulnerabilities in Cellebrite's software that he will present on Friday at Black Hat Asia. He says that forensics software should be put through rigorous penetration tests.

Governance & Risk Management

Pulse Secure VPN Zero-Day Flaw Patched

Scott Ferguson  •  May 3, 2021

Ivanti, parent company of Pulse Secure, published a permanent fix Monday for a zero-day vulnerability in Pulse Connect Secure VPN products that has been exploited to target U.S. government agencies, critical infrastructure providers and other companies over the last several weeks.

Fraud Management & Cybercrime

Attackers' Dwell Time Plummets as Ransomware Hits Continue

Mathew J. Schwartz  •  May 3, 2021

The average amount of time that online attackers camp out in a victim's network - or "dwell time" - has been declining, FireEye's Mandiant incident response group reports. But the surge in ransomware accounts for some attacks coming to light more quickly because those attackers announce their presence.

►

Fraud Management & Cybercrime

ISMG Editors’ Panel: Cyber Extortion and More

Anna Delaney  •  April 30, 2021

Four editors at Information Security Media Group discuss timely issues, including how the zero-day attacks against Accellion File Transfer Appliance users have rewritten the rules of the cyber extortion game and former federal CISO Gregory Touhill taking on an important new role.

Active Defense & Deception

Analysis: 'Cybersecurity Call to Arms'

Anna Delaney  •  April 30, 2021

The latest edition of the ISMG Security Report features an analysis of British spy chief Jeremy Fleming’s "cybersecurity call to arms." Also featured: Insights on COVID-19 business continuity planning; the wisdom of the late Dan Kaminsky.

Business Continuity Management / Disaster Recovery

Fighting Ransomware: A Call for Cryptocurrency Regulation

Scott Ferguson  •  April 29, 2021

A coalition of government agencies and security firms has released a framework for how to disrupt ransomware attacks that calls for expanded regulation of the global cryptocurrency market to better track the virtual coins paid to cybercriminals during extortion schemes.

Cloud Security

Thoma Bravo to Buy Proofpoint for $12.3 Billion

Prajeet Nair  •  April 27, 2021

Private equity firm Thoma Bravo on Monday announced it had signed a definitive agreement to acquire the cybersecurity and compliance firm Proofpoint in a $12.3 billion all-cash deal.

Endpoint Security

Apple Patches Worst Zero-Day Bug 'in Recent Memory'

Jeremy Kirk  •  April 27, 2021

Apple has patched a zero-day flaw in macOS 11.3 that attackers have been exploiting since at least January to install advertising software on victims' systems. The flaw enables a malicious script to be deployed that bypasses Notarization, Gatekeeper and File Quarantine security defenses.

Endpoint Security

FBI Shares Email Addresses to Speed Emotet Cleanup

Jeremy Kirk  •  April 27, 2021

The FBI has shared 4.3 million email addresses stolen by the Emotet malware with the Have I Been Pwned breach notification site. The entry of those addresses into the site increases the chance that those infected with Emotet can take remediation actions, such as changing passwords.