CyberSec Roundup A synopsis of the latest Cybersecurity News   Ransomware Extortion Payments Decline In the 3rd quarter of 2020, Coveware reported that ransomware payments had increased, mainly due to attackers targeting public sector organizations that were more willing to pay up. However, those payments have decreased in the 4th quarter of 2020 to $49,000[…]

CyberSec Roundup A synopsis of the latest Cybersecurity News   SonicWall Exploit Detected in the Wild The NCC Group, an information assurance firm in the UK, has detected that the zero-day vulnerability disclosed by SonicWall is being used in the wild. The vulnerability affects SonicWall SMA 100 devices. NCC Group is working with SonicWall on[…]

CyberSec Roundup A synopsis of the latest Cybersecurity News   Vishing Attacks on the Rise The FBI has warned businesses that there has been an increase in voice phishing attacks for American and internationally based employees. The social engineering attack has been used to trick employees into revealing their VPN and network credentials via a[…]

CyberSec Roundup A synopsis of the latest Cybersecurity News   The Largest Dark Web Marketplace Shutdown The European Union Agency for Law Enforcement Cooperation have shutdown DarkMarket. The operation, which included help from other international agencies such as the FBI and the U.K.’s National Crime Agency also led to the arrest of the architect behind[…]

CyberSec Roundup A synopsis of the latest Cybersecurity News   Russia formally accused of SolarWinds Attack In a joint statement last week, the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI) and Office of the Director of National Intelligence (ODNI) identified Russia as the likely origin of[…]

CyberSec Roundup A synopsis of the latest Cybersecurity News   Microsoft Source Code Accessed Microsoft disclosed that the threat actors who compromised their network via the SolarWinds vulnerability were able to take control of a few of their internal accounts. After escalating the privileges of these accounts, they were able to view source code for[…]

CyberSec Roundup A synopsis of the latest Cybersecurity News   From SunBurst to SuperNova As the security teams continued to investigate the Sunburst SolarWinds Orion cyberattack, the Microsoft team discovered the Orion platform was also distributing another backdoor package called SuperNova. This malware appears to be from a different APT group and could allow them[…]

CyberSec Roundup A synopsis of the latest Cybersecurity News   SolarWinds Attack The major activity last week was around the SolarWinds attack as a number of businesses and government entities were affected.  Last week we covered the sophisticated FireEye hack, but now we know more details and how this is connected to the SolarWinds attack.[…]

CyberSec Roundup A synopsis of the latest Cybersecurity News   Top CyberSec firm hacked FireEye, a leading cybersecurity firm has been hacked. The company’s CEO said that level of sophistication, uniqueness and techniques shown in the attack have led them to believe it was a state sponsored attack. The attackers stole Red Team tools, which[…]

CyberSec Roundup A synopsis of the latest Cybersecurity News   Dark Web Vaccine There are reportedly drug dealers selling the COVID-19 vaccine on the dark web. They are charging up to $1,300 for a dose of the Pfizer/BioNTech vaccine. However, these vendors have been unable to verify that what they are selling is the genuine[…]