News

Norway's Parliament becomes the newest organisation to fall victim to the vulnerabilities in Microsoft's Exchange Server. A press release was issued, confirming that the great assembly Stortingnet had been breached by 'backdoor-installing miscreants'. Marianne Andreassen, the director at Stortingnet stated: "We know that data has been extracted, but we do not yet have a full overview of the situation. We have taken extensive action and cannot rule out that further action will be taken," she...

Three UK universities have been hit by a series of cyberattacks this week. The University of Central Lancashire in Preston, the University of the Highlands and Islands in Scotland, and Queen's University in Belfast were all hit by separate attacks. On Sunday the University of Central Lancashire (UCLAN) experienced an incident that left remote-learning students unable to submit assignments or access some online university systems, with the attack being "rectified within hours" according to a...

The Spanish employment agency has been targeted by a ransomware attack which has resulted in hundreds of offices being knocked offline. Marketing agencies have to be conscious of cyber attacks and how it may impact their customers and any databases that they hold. SEPE are the latest in a string of companies to be held ransom by an unexpected cyber attack. The SEPE published a note on their website which said, "currently, work is being...

AT&T has announced it is expanding its portfolio of Managed Security Services through its alliance with Fortinet to make Secure Access Service Edge (SASE) a reality for enterprises. AT&T SASE with Fortinet is the first, global managed SASE solution at scale that unifies software-defined wide-area network (SD-WAN) with essential network security functions of the SASE framework and 24x7 management. The company notes that this powerful combination of people, processes, and technology will help enterprises to...

Adobe has just released patches for critical security problems which were affecting their Connect, Framemaker and Creative Cloud applications. Following Adobe's monthly security update the vulnerability, tracked as CVE-2021-21056, has been patched in the document processor Framemaker. Three vulnerabilities in Adobe's Creative Cloud were also patched - CVE-2021-21068; CVE-2021-21078; and CVE-2021-21069 following the update. Another critical vulnerability tracked as CVE-2021-21085, which is caused by improper input validation, has also been patched in Adobe's Connect software.

Hackers have claimed that they have breached Verkada Inc., a company that provides security cameras to various organisations. The breach affects around 150,000 security cameras that have been installed in hospitals, schools and businesses. Following the breach, security camera feeds from clinics, schools, prisons and psychiatric hospitals have been hijacked, as well as those of businesses such as Tesla and Cloudflare Inc.  

Apple's OF (Offline Finding) technology uses online finder devices running the 'Find My' app to detect the location of missing offline devices (for instance iPads using Bluetooth and AirTags). The security and privacy of Apple's Bluetooth location-tracking system earned praise from researchers who discovered two flaws in the technology. Computer scientists from the Technische Universität Darmstadt in Germany uncovered several issues following a detailed analysis. In fact, this was the first comprehensive security and privacy...

On Wednesday Russia threatened to block the U.S. social media platform if it did not comply with its deletion demands. This came after Twitter's speed was already reduced in retaliation for its alleged failure to remove banned content. Russian authorities had already accused Twitter of failing to delete posts that were supposedly urging children to take part in anti-Kremlin protests. In a statement released by Roskomnadzor, the state communications regulated claims that as of Wednesday...

Yesterday, GitHub users were automatically logged out of their accounts after their sessions were invalidated in order to protect accounts from a potentially dangerous security vulnerability. Last week GitHub received reports that they were being targetted by suspicious behaviour from an external party. This suspicious behaviour related to a rare race condition vulnerability. The vulnerability was rerouting  GitHub users to the web browser of other logged-in users. This meant that the users who were being rerouted...

Early last week researchers at 360Netlab received reports that QNAP NAS devices were being targetted by a new form of attacks. QNAP is a Taiwanese manufacturer of hardware, including network-attached storage (NAS) devices. Internet of Things (IoT) and NAS devices are usually hijacked using credential theft or brute-force attacks. However, with this wave of attacks, it is thought that attacks exploited two vulnerabilities and used remote code execution (RCE). The vulnerabilities have been identified as...