Darkspider Techtips™

2022-04-23 09:32:58 T-Mobile Admits Lapsus$ Hackers Gained Access to its Internal Tools and Source Code
https://thehackernews.com/2022/04/t-mobile-admits-lapsus-hackers-gained.html

Telecom company T-Mobile on Friday confirmed that it was the victim of a security breach in March after the LAPSUS$ mercenary gang managed to gain access to its networks.
The acknowledgment came after investigative journalist Brian Krebs shared internal chats belonging to the core members of the group indicating that LAPSUS$ breached the company several times in March prior to the arrest of its ओपन / कमेंट

2022-04-23 09:31:59 Atlassian Drops Patches for Critical Jira Authentication Bypass Vulnerability
https://thehackernews.com/2022/04/atlassian-drops-patches-for-critical.html

Atlassian has published a security advisory warning of a critical vulnerability in its Jira software that could be abused by a remote, unauthenticated attacker to circumvent authentication protections.
Tracked as CVE-2022-0540, the flaw is rated 9.9 out of 10 on the CVSS scoring system and resides in Jira's authentication framework, Jira Seraph. Khoadha of Viettel Cyber Security has been ओपन / कमेंट

2022-04-23 02:12:16 Many Medical Device Makers Skimp on Security Practices
https://www.darkreading.com/tech-trends/many-medical-device-makers-skimp-on-security-practices

Barely over a quarter of medical device companies surveyed maintain a software bill-of-materials, and less than half set security requirements at the design stage. ओपन / कमेंट

2022-04-23 00:47:26 Cybersecurity threats to critical infrastructure – Week in security with Tony Anscombe
https://www.welivesecurity.com/videos/week-security-tony-anscombe-169/

As the Five Eyes nations warn of attacks against critical infrastructure, we look at the potentially cascading effects of such attacks and how essential systems and services can ramp up their defense
The post Cybersecurity threats to critical infrastructure – Week in security with Tony Anscombe (https://www.welivesecurity.com/videos/week-security-tony-anscombe-169/) appeared first on WeLiveSecurity (https://www.welivesecurity.com/) ओपन / कमेंट

2022-04-23 00:06:42 Sophos Buys Alert-Monitoring Automation Vendor
https://www.darkreading.com/analytics/sophos-buys-alert-monitoring-automation-vendor

Acquisition of cloud-based alert security company will help Sophos automate tasks bogging down security teams, the company says. ओपन / कमेंट

2022-04-22 23:15:44 Neustar Security Services’ UltraDNS Integrates Terraform for Streamlined, Automated DNS Management
https://www.darkreading.com/perimeter/neustar-security-services-ultradns-integrates-terraform-for-streamlined-automated-dns-management

UltraDNS Terraform Provider enhances productivity, change management. ओपन / कमेंट

2022-04-22 23:14:44 FBI Warns Ransomware Attacks on Agriculture Co-ops Could Upend Food Supply Chain
https://www.darkreading.com/attacks-breaches/fbi-warns-agriculture-about-ransomware-attacks-timed-to-planting-harvest-seasons

Ransomware groups are looking to strike large agriculture cooperatives during strategic seasons, when they are most vulnerable, according to law enforcement. ओपन / कमेंट

2022-04-22 21:59:53 Early Discovery of Pipedream Malware a Success Story for Industrial Security
https://www.darkreading.com/vulnerabilities-threats/pipedream-response-shows-best-case-for-industrial-security

Cybersecurity professionals discovered, analyzed, and created defenses against the ICS malware framework before it was deployed, but expect the stakes to keep rising. ओपन / कमेंट

2022-04-22 19:08:56 Fortress Information Security Receives $125M Strategic Investment from Goldman Sachs Asset Management
https://www.darkreading.com/operations/fortress-information-security-receives-125m-strategic-investment-from-goldman-sachs-asset-management

. ओपन / कमेंट

2022-04-22 19:07:55 Comcast Business 2021 DDoS Threat Report: DDoS Becomes a Bigger Priority as Multivector Attacks are on the Rise
https://www.darkreading.com/attacks-breaches/comcast-business-2021-ddos-threat-report-ddos-becomes-a-bigger-priority-as-multivector-attacks-are-on-the-rise

Comcast Business mitigated 24,845 multi-vector DDoS attacks in 2021, a 47 percent increase over 2020. ओपन / कमेंट