• Search for:
    14 Dec, 2021
    Microsoft Patch Tuesday, December 2021 Edition
    Cybersecurity , , , , , , , , , , , , , , , , , ,

    Microsoft, Adobe, and Google all issued security updates to their products today. The Microsoft patches include six previously disclosed security flaws, and one that that is already being actively exploited. But this month’s Patch Tuesday is being overshadowed by the “Log4Shell” 0-day exploit in a popular Java library that web server administrators are now racing to find and patch amid widespread exploitation of the flaw. …

    Read MoreMicrosoft Patch Tuesday, December 2021 Edition

    14 Dec, 2021
    Inside Ireland’s Public Healthcare Ransomware Scare
    Cybersecurity , , , , , , , , ,

    The accounting firm PricewatersCoopers recently published lessons learned from the disruptive and costly ransomware attack in May 2021 on Ireland’s public health system. The unusually candid post-mortem found that nearly two months elapsed between the initial intrusion and the launching of the ransomware. It also found affected hospitals had tens of thousand of outdated Windows 7 systems, and that the health system’s IT administrators failed to respond to multiple warning signs that a massive attack was imminent. …

    Read MoreInside Ireland’s Public Healthcare Ransomware Scare

    8 Dec, 2021
    Canada Charges Its “Most Prolific Cybercriminal”
    Cybersecurity , , , , , , , , , , , ,

    A 31-year-old Canadian man has been arrested and charged with fraud in connection with numerous ransomware attacks against businesses, government agencies and private citizens throughout Canada and the United States. Canadian authorities describe him as “the most prolific cybercriminal we’ve identified in Canada,” but so far they’ve released few other details about the investigation or the defendant. Helpfully, an email address and nickname apparently connected to the accused offer some additional clues. …

    Read MoreCanada Charges Its “Most Prolific Cybercriminal”

    3 Dec, 2021
    Who Is the Network Access Broker ‘Babam’?
    Cybersecurity , , , , , , , , , ,

    Rarely do cybercriminal gangs that deploy ransomware gain the initial access to the target themselves. More commonly, that access is purchased from a cybercriminal broker who specializes in stealing remote access credentials — such as usernames and passwords needed to remotely connect to the target’s network. In this post we’ll look at the clues left behind by “Babam,” the handle chosen by a cybercriminal who has sold such access to ransomware groups on many occasions over the past few years. …

    Read MoreWho Is the Network Access Broker ‘Babam’?

    2 Dec, 2021
    Ubiquiti Developer Charged With Extortion, Causing 2020 “Breach”
    Cybersecurity , , ,

    In January 2021, technology vendor Ubiquiti Inc. [NYSE:UI] disclosed that a breach at a third party cloud provider had exposed customer account credentials. In March, a Ubiquiti employee warned that the company had drastically understated the scope of the incident, and that the third-party cloud provider claim was a fabrication. On Wednesday, a former Ubiquiti developer was arrested and charged with stealing data and trying to extort his employer while pretending to be a whistleblower. …

    Read MoreUbiquiti Developer Charged With Extortion, Causing 2020 “Breach”

    30 Nov, 2021
    Stephen Boyer, CTO, BitSight: Risk quantification and ransomware
    Cloud, Cybersecurity , , , , , , , , , , , , ,

    Fin is an editor at TechForge Media and University of Bristol graduate. He wields an impressive knowledge of the latest technologies and has interviewed leading industry figures from companies like

    Continue ReadingStephen Boyer, CTO, BitSight: Risk quantification and ransomware

    26 Nov, 2021
    The Internet is Held Together With Spit & Baling Wire
    Cybersecurity , , , , , , , , , ,

    Imagine being able to disconnect or redirect Internet traffic destined for some of the world’s largest companies — just by spoofing an email. This is the nature of a threat vector recently removed by a Fortune 500 firm that operates one of the world’s largest Internet backbones. …

    Read MoreThe Internet is Held Together With Spit & Baling Wire

    22 Nov, 2021
    Arrest in ‘Ransom Your Employer’ Email Scheme
    Cybersecurity , , , , , , , ,

    In August, KrebsOnSecurity warned that scammers were contacting people and asking them to unleash ransomware inside their employer’s network, in exchange for a percentage of any ransom amount paid by the victim company. This week, authorities in Nigeria arrested a suspect in connection with the scheme — a young man who said he was trying to save up money to help fund a new social network. …

    Read MoreArrest in ‘Ransom Your Employer’ Email Scheme