News

One Identity, provider of identity-centered security, today announced the company’s 2nd second consecutive year being named an Overall Leader for its Privileged Access Management solutions in KuppingerCole’s 2020 Leadership Compass for Privileged Access Management (PAM) report. 1 This recognition follows One Identity’s recent placement as an Overall Leader in KuppingerCole’s Leadership Compass for Identity Governance and Administration (IGA) report. 2   When creating the 2020 Leadership Compass PAM report, KuppingerCole Analysts evaluated the strengths and...

Zoom has been on an epic security journey since the coronavirus pandemic began. As the video conferencing app’s users surged to hundreds of millions within weeks, security issues and vulnerabilities left trust in Zoom at an all-time low. But Zoom quickly responded to criticism of its security with a 90 day plan outlined on April 1, which detailed ambitions to make its service safer for millions of users. Now that three months is up, Zoom...

TikTok’s rising alternative, Chingari, has been doing the rounds on social media crossing several million downloads in the last few days. However, a new report indicates that the website of the company behind the app has malicious content pinned to its webpages. Robert Baptiste, a security researcher going by the twitter name Elliot Anderson said that the website of Globussoft, the company under which the Chingari app was incubated, has been compromised. He included a report...

Dozens of US newspaper websites owned by the same company were hacked by the Evil Corp gang to infect the employees of over 30 major US private firms. The cybercriminal outfit lured users with fake software update alerts displayed by the malicious SocGholish JavaScript-based framework. After downloads were made, the employees' computers were the used as a stepping point into their companies' enterprise networks as part of what looks like a series of targeted drive-by...

Eskenzi PR has today announced that the fifth annual Security Serious Unsung Heroes Awards are open for nominations. The 2020 awards are a chance to celebrate the people, not products, on the front lines of battling cyber threats – whether that be in the classroom, in law enforcement or within corporate organisations. A new category has been added this year for those helping to keep UK businesses safe through the COVID-19 pandemic.     Nominations are open until the 31st of August 2020 and the Unsung Heroes Awards will take place...

A new info-stealer and data wiper malware called EvilQuest uses ransomware as a cover to steal files from macOS users. The victims get infected after downloading trojanized installers of popular apps from torrent trackers. EvilQuest was first spotted by K7 Lab malware researcher Dinesh Devadoss and analysed by Malwarebytes' Director of Mac & Mobile Thomas Reed, Jamf Principal Security Researcher Patrick Wardle, and BleepingComputer's Lawrence Abrams. Source: BleepingComputer

Xerox Corporation is the latest victim of the Maze ransomware operators. Hackers have encrypted its files and threatened to release them. Maze ransomware operators have breached the systems of the Xerox Corporation and stolen files before encrypting them. The company did not disclose the cyberattack, but the Maze ransomware operators published some screenshots that show that a Xerox domain has been encrypted. One screenshot shows that hosts on “eu.xerox.net,” managed by Xerox Corporation, were hacked....

The Cybereason Nocturnus team is investigating a new campaign involving FakeSpy, an Android mobile malware that emerged around October 2017. FakeSpy is an information stealer used to steal SMS messages, send SMS messages, steal financial data, read account information and contact lists, steal application data, and do much more. FakeSpy first targeted South Korean and Japanese speakers. However, it has begun to target users all around the world, especially users in countries like China, Taiwan,...

One of Hong Kong’s most prominent pro-democracy activists, has disbanded his party after China’s top legislative body passed a national security law for the territory. Tam Yiu-chung, a member of China’s rubber-stamp legislature, said full details of the law would only be released once the meeting closed on Tuesday. But in a sign that the law is already having a chilling effect on local politics, the pro-democracy opposition party headed by Joshua Wong, Demosisto, announced...

Bitdefender researchers identified the APT group StrongPity  targeting victims in Syria and Turkey. They used watering hole tactics to selectively infect victims and deploying a three-tier C&C infrastructure to thwart forensic investigations, the APT group leveraged Trojanized popular tools, such as archivers, file recovery applications, remote connections applications, utilities, and even security software, to cover a wide range of options that targeted victims might be seeking. The data gathered while investigating this group suggests the...