October 2021 – Page 4

Hackers used billing software zero-day to deploy ransomware

An unknown ransomware group is exploiting a critical SQL injection bug found in the BillQuick Web Suite time and billing solution to deploy ransomware on their targets’ networks in ongoing attacks. […]

25 Oct

CISA urges admins to patch critical Discourse code execution bug

A critical Discourse remote code execution (RCE) vulnerability tracked as CVE-2021-41163 was fixed via an urgent update by the developer on Friday […]

25 Oct

Microsoft: Russian SVR hacked at least 14 IT supply chain firms since May

Microsoft says the Russian-backed Nobelium threat group behind last year’s SolarWinds hack is still targeting the global IT supply chain, with 140 resellers and technology service providers attacked and at least 14 breached since May 2021. […]

24 Oct

BlackMatter ransomware victims quietly helped using secret decryptor

Cybersecurity firm Emsisoft has been secretly decrypting BlackMatter ransomware victims since this summer, saving victims millions of dollars. […]

24 Oct

Microsoft 365 will get support for custom ARC configurations

Microsoft is working on adding custom Authenticated Received Chain (ARC) configuration support to Microsoft Defender for Office 365. […]

23 Oct

Popular NPM library hijacked to install password-stealers, miners

Hackers hijacked the popular UA-Parser-JS NPM library, with millions of downloads a week, to infect Linux and Windows devices with cryptominers and password-stealing trojans in a supply-chain attack. […]

23 Oct

Hacker sells the data for millions of Moscow drivers for $800

Hackers are selling a stolen database containing 50 million records of Moscow driver data on an underground forum for only $800. […]

23 Oct

FTC: ISPs collect and monetize far more user data than you’d think

The Federal Trade Commission (FTC) found that six largest internet service providers (ISPs) in the U.S. collect and share customers’ personal data without providing them with info on how it’s used or meaningful ways to control this process. […]

22 Oct

The Week in Ransomware – October 22nd 2021 – Striking back

Between law enforcement operations, REvil’s second shut down, and ransomware gangs’ response to the hacking of their servers, it has been quite the week. […]

22 Oct

SCUF Gaming store hacked to steal credit card info of 32,000 customers

SCUF Gaming International, a leading manufacturer of custom PC and console controllers, is notifying customers that its website was hacked in February to plant a malicious script used to steal their credit card information. […]

Month: October 2021

Hackers used billing software zero-day to deploy ransomware

CISA urges admins to patch critical Discourse code execution bug

Microsoft: Russian SVR hacked at least 14 IT supply chain firms since May

BlackMatter ransomware victims quietly helped using secret decryptor

Microsoft 365 will get support for custom ARC configurations

Popular NPM library hijacked to install password-stealers, miners

Hacker sells the data for millions of Moscow drivers for $800

FTC: ISPs collect and monetize far more user data than you’d think

The Week in Ransomware – October 22nd 2021 – Striking back

SCUF Gaming store hacked to steal credit card info of 32,000 customers