Cybersecurity Archives - Page 33 of 60 - s0x • Austin Managed IT Services

8 Jul, 2021

Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software

Cybersecurity A Little Sunshine, alex holden, CVE-2015-2862, CVE-2021-30116, Data Breaches, Dutch Institute for Vulnerability Disclosure, Fred Voccola, Hold Security, Kaseya, Mandiant, Michael Sanders, Ransomware, rEvil, Victor Gevers, Wietse Boonstra

Last week cybercriminals deployed ransomware to 1,500 organizations that provide IT security and technical support to many other companies. The attackers exploited a vulnerability in software from Kaseya, a Miami-based company whose products help system administrators manage large networks remotely. Now it appears Kaseya’s customer service portal was left vulnerable until last week to a data-leaking security flaw that was first identified in the same software six years ago. …

7 Jul, 2021

Microsoft Issues Emergency Patch for Windows Flaw

Cybersecurity CVE-2021-34527, KB5004945, Latest Warnings, PrintNightmare, Satnam Narang, Security Tools, Tenable, Time to Patch

Microsoft on Tuesday issued an emergency software update to quash a security bug that’s been dubbed “PrintNightmare,” a critical vulnerability in all supported versions of Windows that is actively being exploited. The fix comes a week ahead of Microsoft’s normal monthly Patch Tuesday release, and follows the publishing of exploit code showing would-be attackers how to leverage the flaw to break into Windows computers. …

2 Jul, 2021

Another 0-Day Looms for Many Western Digital Users

Cybersecurity Ars Technica, Dan Goodin, Latest Warnings, MyBook Live, MyCloud OS 3, MyCloud OS 5, Pedro Ribeiro, Pwn2Own, Radek Domanski, The Coming Storm, Time to Patch, Western Digital

Countless Western Digital customers saw their MyBook Live network storage drives remotely wiped in the past month thanks to a bug in a product line the company stopped supporting in 2015, as well as a previously unknown zero-day flaw. But there is a similarly serious zero-day flaw present in a much broader range of newer Western Digital MyCloud network storage devices that will remain unfixed for many customers who can’t or won’t upgrade to the latest operating system. …

1 Jul, 2021

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Cybersecurity A Little Sunshine, Acquicent, ADP, Anthony Citrano, Equifax, Equifax breach, Intuit, Intuit Online Payroll, Quickbooks Payroll, TALX, The Coming Storm, The Work Number

Financial services giant Intuit this week informed 1.4 million small businesses using its QuickBooks Online Payroll and Intuit Online Payroll products that their payroll information will be shared with big-three consumer credit bureau Equifax starting later this year unless customers opt out by the end of this month. Intuit says the change is tied to an “exciting” and “free” new service that will let millions of small business employees get easy access to employment and income verification services when they wish to apply for a loan or line of credit. …

30 Jun, 2021

We Infiltrated a Counterfeit Check Ring! Now What?

Cybersecurity A Little Sunshine, Agari, B. Ware, BEC fraud, Brianna Ware, car wrap scam, CEO scams, Ne'er-Do-Well News, romance scams, Ronnie Tokazowski, Scattered Canara, The Coming Storm

Imagine waking up each morning knowing the identities of thousands of people who are about to be mugged for thousands of dollars each. You know exactly when and where each of those muggings will take place, and you’ve shared this information in advance with the authorities each day for a year with no outward indication that they are doing anything about it. How frustrated would you be? Such is the curse of the fraud fighter known online by the handles “Brianna Ware” and “BWare” for short, a longtime member of a global group of volunteers who’ve infiltrated a cybercrime gang that disseminates fraudulent checks tied to a dizzying number of online scams. …

25 Jun, 2021

MyBook Users Urged to Unplug Devices from Internet

Cybersecurity Ars Technica, Bleeping Computer, CVE-2018-18472, Latest Warnings, MyBook, MyBook Live, MyBook Live Duo, National Vulnerability Database, Time to Patch, Western Digital, Wizcase.com

23 Jun, 2021

How Cyber Sleuths Cracked an ATM Shimmer Gang

Cybersecurity All About Skimmers, atm shimmer, ATM skimming, Citi, download card, Florian Tudor, Intacash, Jeffrey Dant, Organized Crime and Corruption Reporting Project, U.S. Secret Service

In 2015, police departments worldwide started finding ATMs compromised with advanced new “shimming” devices made to clone data from chip card transactions. Authorities in the United States and abroad had seized many of these shimmers, but for years couldn’t decrypt the data on the devices. This is a story of ingenuity and happenstance, and how one former Secret Service agent helped crack a code that revealed the contours of a global organized crime ring. …

21 Jun, 2021

How Cyber Safe is Your Drinking Water Supply?

Cybersecurity Andrew Hildick-Smith, Environmental Protection Agency, Kevin Collier, Michael Arceneaux, NBCNews, Teamviewer, The Coming Storm, Water Infrastructure Act of 2018, WaterISAC

18 Jun, 2021

First American Financial Pays Farcical $500K Fine

Cybersecurity A Little Sunshine, accepted the risk, American Land Title Association, First American Financial Corp., mark rasch, Michael Volkov, New York State Department of Financial Services, simpleshowing.com, The Volkov Law Group, U.S. Securities and Exchange Commission

In May 2019, KrebsOnSecurity broke the news that the website of mortgage settlement giant First American Financial Corp. [NYSE:FAF] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back more than 16 years. This week, the U.S. Securities and Exchange Commission settled its investigation into the matter after the Fortune 500 company agreed to pay a paltry penalty of less than $500,000. …

16 Jun, 2021

Ukrainian Police Nab Six Tied to CLOP Ransomware

Cybersecurity Accellion, ATT&CK, Babuk, Clop, DarkSide, File Transfer Appliance, Intel 471, Jones Day, Krogers, MITRE, Ne'er-Do-Well News, Qualys, Ransomware, SingTel, Stanford University Medical School, University of Maryland and the University of California

s0x • Austin Managed IT Services

s0x • Austin Managed IT Services

Category Archives: Cybersecurity