January 30, 2022

Over 20,000 Data Center Management Systems Exposed to Hackers Researchers have found over 20,000 instances of publicly exposed data center infrastructure management (DCIM) software that monitor devices, HVAC control systems, and power distribution units, which could be used for a range of catastrophic attacks. Data centers house costly systems that Read more…

The Week in Ransomware – January 28th 2022 – Get NAS Devices off the Internet It’s been a busy week with ransomware attacks tied to political protests, new attacks on NAS devices, amazing research released about tactics, REvil’s history, and more. This week’s biggest news is about a new ransomware Read more…

US Bans Major Chinese Telecom Over National Security Risks The Federal Communications Commission (FCC) has revoked China Unicom Americas’ license, one of the world’s largest mobile service providers, over “serious national security concerns.” This effectively bans the telecom company from providing domestic and international telecommunication services within the United States. Read more…

NCSC Alerts UK Orgs to Brace for Destructive Russian Cyberattacks The UK’s National Cyber Security Centre (NCSC) is urging organizations to bolster security and prepare for a potential wave of destructive cyberattacks after recent breaches of Ukrainian entities. The NCSC openly warns that Russian state-sponsored threat actors will likely conduct Read more…

EU to Create Pan-European Cyber Incident Coordination Framework The European Systemic Risk Board (ESRB) proposed a new systemic cyber incident coordination framework that would allow EU relevant authorities to coordinate better when responding to major cross-border cyber incidents impacting the Union’s financial sector. ESRB is an independent EU body established in Read more…

Hackers are Taking Over CEO Accounts with Rogue OAuth Apps Threat analysts have observed a new campaign named ‘OiVaVoii’, targeting company executives and general managers with malicious OAuth apps and custom phishing lures sent from hijacked Office 365 accounts. According to a report from Proofpoint, the campaign is still ongoing, though Read more…

Finnish Diplomats’ Phones Infected with NSO Group Pegasus Spyware Finland’s Ministry for Foreign Affairs says devices of Finnish diplomats have been hacked and infected with NSO Group’s Pegasus spyware in a cyber-espionage campaign. “Finnish diplomats have been targets of cyber espionage by means of the Pegasus spyware, developed by NSO Read more…

Finland Warns of Facebook Accounts Hijacked via Messenger Phishing Finland’s National Cyber Security Centre (NCSC-FI) warns of an ongoing phishing campaign attempting to hijack Facebook accounts by impersonating victims’ friends in Facebook Messenger chats. In the alert, the NCSC-FI says that all Facebook users who received messages from online acquaintances Read more…