December 2020 – Page 7

SolarWinds hackers breach US nuclear weapons agency

Nation-state hackers have breached the networks of the National Nuclear Security Administration (NNSA) and the US Department of Energy (DOE). […]

17 Dec

Bouncy Castle crypto authentication bypass vulnerability revealed

A severe authentication bypass vulnerability has been reported in Bouncy Castle, a popular open-source cryptography library. When exploited, the vulnerability (CVE-2020-28052) can allow an attacker to gain access to user and administrator accounts due to a cryptographic weakness in the manner passwords are checked. […]

17 Dec

Nation-state hackers breached US think tank thrice in a row

An advanced hacking group believed to be working for the Russian government has compromised the internal network of a think tank in the U.S. three times. […]

17 Dec

Ransomware masquerades as mobile version of Cyberpunk 2077

A threat actor is distributing fake Windows and Android installers for the Cyberpunk 2077 game that is installing a ransomware calling itself CoderWare. […]

16 Dec

Malicious Chrome, Edge extensions with 3M installs still in stores

Malicious Chrome and Edge browser extensions with over 3 million installs, most of them still available on the Chrome Web Store and the Microsoft Edge Add-ons portal, are capable of stealing users’ info and redirecting them to phishing sites. […]

16 Dec

FireEye, Microsoft create kill switch for SolarWinds backdoor

Microsoft, FireEye, and GoDaddy have collaborated to create a kill switch for the SolarWinds Sunburst backdoor that forces the malware to terminate itself. […]

16 Dec

Emulated mobile devices used to steal millions from US, EU banks

Threat actors behind an ongoing worldwide mobile banking fraud campaign were able to steal millions from multiple US and EU banks, needing just a few days for each attack. […]

16 Dec

Malicious RubyGems packages used in cryptocurrency supply chain attack

New malicious RubyGems packages have been discovered that are being used in a supply chain attack to steal cryptocurrency from unsuspecting users. […]

16 Dec

HPE discloses critical zero-day in server management software

Hewlett Packard Enterprise (HPE) has disclosed a zero-day bug in the latest versions of its proprietary HPE Systems Insight Manager (SIM) software for Windows and Linux. […]

15 Dec

Gmail hit by a second outage within a single day

Gmail is suffering its second outage in 24 hours, with users able to access their email but unable to send to other Gmail users or are experiencing unexpected behavior. […]

Month: December 2020

SolarWinds hackers breach US nuclear weapons agency

Bouncy Castle crypto authentication bypass vulnerability revealed

Nation-state hackers breached US think tank thrice in a row

Ransomware masquerades as mobile version of Cyberpunk 2077

Malicious Chrome, Edge extensions with 3M installs still in stores

FireEye, Microsoft create kill switch for SolarWinds backdoor

Emulated mobile devices used to steal millions from US, EU banks

Malicious RubyGems packages used in cryptocurrency supply chain attack

HPE discloses critical zero-day in server management software

Gmail hit by a second outage within a single day