24 Dec Citrix confirms ongoing DDoS attack impacting NetScaler ADCs Citrix has confirmed today that an ongoing ‘DDoS attack pattern’ using DTLS as an amplification vector is affecting Citrix Application Delivery Controller (ADC) networking appliances with EDT enabled. […]
23 Dec FBI: Iran behind pro-Trump ‘enemies of the people’ doxing site Iranian cyber actors are likely behind a campaign that encouraged deadly violence against U.S. state officials certifying the 2020 election results. […]
23 Dec PSA: Active Chase phishing scam pretends to be fraud alerts A large scale phishing scam is underway that pretends to be a security notice from Chase stating that fraudulent activity has been detected and caused the recipient’s account to be blocked. […]
23 Dec Windows zero-day with bad patch gets new public exploit code Back in June, Microsoft released a fix for a vulnerability in the Windows operating system that enabled attackers to increase their permissions to kernel level on a compromised machine. The patch did not stick. […]
23 Dec Microsoft 365 admins can now get security incident email alerts Microsoft has added support for security incident email notifications to the Microsoft 365 Defender enterprise threat protection solution. […]
23 Dec UK privacy watchdog warns SolarWinds victims to report data breaches United Kingdom’s Information Commissioner’s Office (ICO) has warned organizations that fell victim to the SolarWinds hack that they are required to report data breaches within three days after their discovery. […]
22 Dec Biden blasts Trump administration over SolarWinds attack response U.S. President-Elect Joe Biden has criticized the Trump administration over the lack of response regarding the SolarWinds response and for failing to officially attribute the attacks. […]
22 Dec Roanoke College delays spring semester after cyberattack Roanoke College has delayed their spring semester by almost a month after a cyberattack has impacted files and data access. […]
22 Dec Safe-Inet, Insorg VPN services shut down by law enforcement Law enforcement agencies around the world in a coordinated effort took down and seized the infrastructure supporting Safe-Inet and Insorg VPN and proxy services known for catering cybercriminal activity. […]
22 Dec Microsoft: Don’t delete Windows 10 root certificate expiring this month A Microsoft root certificate is expiring at the end of this month, and Microsoft warns that removing it could cause problems with the operating system. […]