September 25, 2021

The Week in Ransomware – September 24th 2021 – Targeting Crypto This week’s biggest news is the USA sanctioning a crypto exchange used by ransomware gangs to convert cryptocurrency into fiat currency. By targeting rogue exchanges, the US government is hoping to disrupt ransomware’s payment system. This other interesting news this week Read more…

United Health Centers Ransomware Attack Claimed by Vice Society ​California-based United Health Centers suffered a ransomware attack that reportedly disrupted all of their locations and resulted in patient data theft. United Health Centers is a health care provider in California with twenty-one community health centers servicing Fresno, Kings, and Tulare counties. On Read more…

Google Apologizes For Scaring Cloud Users With ‘past due’ Emails Google has apologized for a wave of emails warning Google Cloud Platform, Firebase, or API customers that their accounts may be suspended for a past due balance. Users began receiving these emails on September 22nd, which warned that their account was Read more…

Emergency Google Chrome Update Fixes Zero-day Exploited In The Wild Google has released Chrome 94.0.4606.61 for Windows, Mac, and Linux, an emergency update addressing a high-severity zero-day vulnerability exploited in the wild. “Google is aware that an exploit for CVE-2021-37973 exists in the wild,” the browser vendor revealed in today’s security advisory. This Chrome Read more…

Microsoft Rushes To Register Autodiscover Domains Leaking Credentials Microsoft is rushing to register Internet domains used to steal Windows credentials sent from faulty implementations of the Microsoft Exchange Autodiscover protocol. On Monday, Guardicore’s Amit Serper released new research about how the issue caused the exposure of close to 100,000 unique Windows and Read more…

EU Officially Blames Russia For ‘Ghostwriter’ Hacking Activities The European Union has officially linked Russia to a hacking operation known as Ghostwriter that targets high-profile EU officials, journalists, and the general public. “These malicious cyber activities are targeting numerous members of Parliaments, government officials, politicians, and members of the press and Read more…

Researcher Drops Three iOS Zero-days That Apple Refused To Fix Proof-of-concept exploit code for three iOS zero-day vulnerabilities (and a fourth one patched in July) was published on GitHub after Apple delayed patching and failed to credit the researcher. The unknown researcher who found the four zero-days reported them to Apple between Read more…

Cisco Fixes Highly Critical Vulnerabilities in IOS XE Software Cisco has patched three critical vulnerabilities affecting components in its IOS XE internetworking operating system powering routers and wireless controllers, or products running with a specific configuration. The worst of the flaws received the highest severity rating, 10 out of 10; Read more…

SonicWall Fixes Critical Bug Allowing SMA 100 Device Takeover SonicWall has patched a critical security flaw impacting several Secure Mobile Access (SMA) 100 series products that can let unauthenticated attackers remotely gain admin access on targeted devices. The SMA 100 series appliances vulnerable to attacks targeting the improper access control Read more…