Credit to Author: BrianKrebs| Date: Mon, 24 Feb 2020 17:13:11 +0000
Networking hardware vendor Zyxel today released an update to fix a critical flaw in many of its network attached storage (NAS) devices that can be used to remotely commandeer them. The patch comes 12 days after KrebsOnSecurity alerted the company that precise instructions for exploiting the vulnerability were being sold for $20,000 in the cybercrime underground. Based in Taiwan, Zyxel Communications Corp. (a.k.a “ZyXEL”) is a maker of networking devices, including Wi-Fi routers, NAS products and hardware firewalls. The company has roughly 1,500 employees and boasts some 100 million devices deployed worldwide. While in many respects the class of vulnerability addressed in this story is depressingly common among Internet of Things (IoT) devices, the flaw is notable because it has attracted the interest of groups specializing in deploying ransomware at scale.
Credit to Author: BrianKrebs| Date: Mon, 18 Feb 2019 13:51:01 +0000
The U.S. government — along with a number of leading security companies — recently warned about a series of highly complex and widespread attacks that allowed suspected Iranian hackers to siphon huge volumes of email passwords and other sensitive data from multiple governments and private companies. But to date, the specifics of exactly how that attack went down and who was hit have remained shrouded in secrecy. This post seeks to document the extent of those attacks, and traces the origins of this overwhelmingly successful cyber espionage campaign back to a cascading series of breaches at key Internet infrastructure providers.
Credit to Author: Kayla Matthews| Date: Tue, 15 Jan 2019 17:16:00 +0000
As of this writing, the government shutdown of 2019 is the longest ever in America. Will the government’s stable of cybersecurity talent be the next casualty—now and in the long run?
Credit to Author: Eugene Kaspersky| Date: Fri, 30 Nov 2018 18:03:43 +0000
The US Court of Appeals has made a decision regarding the FY18 National Defense Authorization Act. A personal message from Eugene Kaspersky to our partners, stakeholders, friends, and supporters.
As Kaspersky Lab’s legal challenge continues, Eugene Kaspersky considers why cybersecurity companies must fight for the industry to stay open and collaborative
Credit to Author: Christopher Boyd| Date: Fri, 08 Sep 2017 15:00:14 +0000
Every now and then, we see the 419 “Hitman deployed to kill you” missive doing the rounds. This time, we have a fake DHS notification telling you to pay a $350 fee within 24 hours – or else.