Researchers Disclose More Malware Used in SolarWinds Attack

Scott Ferguson • March 4, 2021

Researchers with Microsoft and FireEye are disclosing additional malware used by the hacking group that targeted SolarWinds last December. These second-stage malware variants appear to have been deployed after organizations downloaded the "Sunburst" backdoor hidden in a software update.

Application Security

Not 'Above the Law' - Feds Target ICO Cryptocurrency Scams

Latest

Business Continuity Management / Disaster Recovery

Mark of Ransomware's Success: $370 Million in 2020 Profits

Mathew J. Schwartz • March 5, 2021

Ransomware dominated the online-enabled crime landscape in 2020, some security experts say, thanks to the massive profits it's been generating and the relative ease of use for attackers - including support from a burgeoning cybercrime-as-a-service market.

Governance & Risk Management

Hackers Exploit Exchange Flaws to Target Local Governments

Scott Ferguson • March 5, 2021

Hackers have targeted units of local government by attempting to exploit unpatched vulnerabilities in Microsoft Exchange email servers, according to a new report by the security firm FireEye. Meanwhile, CISA has updated its alert.

3rd Party Risk Management

Accellion Appliance Zero-Day Attack Breaches: Key Takeaways

Anna Delaney • March 5, 2021

This edition of the ISMG Security Report features an analysis of key takeaways from the breaches tied to flaws in the Accellion File Transfer appliance. Also featured: Equifax CISO Jamil Farshchi on transforming supply chain security, plus an analysis of how "work from anywhere" is affecting cybersecurity.

Breach Notification

Russian Cybercrime Forum 'Maza' Suffers Data Breach

Akshaya Asokan • March 4, 2021

The Russian carding and fraud discussion forum Maza has been breached, and hackers have leaked what appear to be legitimate members' details, including email addresses and forum credentials, threat-intelligence firms report. The breach and data leak follows a recent wave of attacks against cybercrime forums.

Governance & Risk Management

Lesson From SolarWinds Attack: It's Time to Beef Up IAM

Scott Ferguson • March 4, 2021

The SolarWinds supply chain attack should prompt federal agencies and others to rethink how they approach security issues - especially identity and access management, according to a breakdown of the attack presented this week by NIST and CISA.

Breach Notification

Qualys Gets 'Clopped' by Accellion-Exploiting Attackers

Mathew J. Schwartz • March 4, 2021

Qualys has confirmed that its Accellion File Transfer Appliance software was breached by zero-day-wielding attackers after stolen customer data appeared on the Clop ransomware gang's data leaks site. The security firm's public breach notification comes more than two months after the firm first learned it had been...

Identity & Access Management

Okta to Buy Auth0 for $6.5 Billion

Doug Olenick • March 4, 2021

The security firm Okta shook up the identity and access management market Wednesday by announcing a $6.5 billion deal to acquire the customer IAM technology supplier Auth0. Two other cybersecurity M&A deals were also announced this week.

Identity & Access Management

Changing Authentication for Employees

Suparna Goswami • March 4, 2021

New authentication models, including dynamic authorization and continuous authentication, that work well for consumers can be adopted for employees as well, says Thomas Malta, head of identity and access management at the Virginia-based Navy Federal Credit Union.

Cybercrime

Ursnif Trojan Targets Italian Bank Customer Data

Doug Olenick • March 3, 2021

Payment card information and other data for customers of at least 100 Italian banks and one payment processor were compromised using the Ursnif banking Trojan, according to Avast Threat Labs.

3rd Party Risk Management

GAO Report Highlights Need for Centralized Cyber Leadership

Scott Ferguson • March 3, 2021

A lack of centralized leadership, especially at the White House level, is hindering the federal government's ability to address numerous cybersecurity issues, including the SolarWinds supply chain attack that affected federal agencies and others, according to a new GAO report.

Application Security

Microsoft Patches Four Zero-Day Flaws in Exchange

Jeremy Kirk • March 3, 2021

Microsoft issued emergency software patches on Tuesday for four zero-day vulnerabilities in its Exchange email server. The alarming vulnerabilities could allow a remote attacker into Exchange and possibly enable further lateral movement.

Governance & Risk Management

Cybersecurity Leadership: Identity, Access, Complexity

Tom Field • March 3, 2021

In this era of "work from anywhere," identity and access management solutions are challenged more than ever. What are the strategies and solutions recommended by top CEOs and CISOs in the cybersecurity sector? An expert panel weighs in.