“Worst cloud vulnerability you can imagine” discovered in Microsoft Azure [Extended story] Cloud security vendor Wiz announced that it had found a vulnerability in Microsoft Azure’s managed database service, Cosmos DB, which granted read/write access for every database on the…
This week’s Cyber Security Headlines – Week in Review, August 23-27, 2021, is hosted by Steve Prentice with our guest, Edward Contreras, (@CISOEdwardC)CISO, Frost Bank Cyber Security Headlines – Week in Review is live every Friday at at 12:30pm PT/3:30pm…
Modded WhatsApp delivers Triada trojan A modified version of the WhatsApp messaging app for Android has been trojanized to serve malicious payloads, display full-screen ads, and sign up device owners for unwanted premium subscriptions without their knowledge. According to researchers…
Microsoft Exchange under attack with ProxyShell flaws CISA is warning of active exploitation attempts that leverage the latest line of “ProxyShell” Microsoft Exchange vulnerabilities that were patched earlier this May, including deploying LockFile ransomware on compromised systems. The vulnerabilities enable…
This week’s Cyber Security Headlines – Week in Review, August 16-20, 2021, is hosted by Rich Stroffolino with our guest, Will Gregorian, Head of Security and Technical Operations, Rhino Cyber Security Headlines – Week in Review is live every Friday…
Chase bank accidentally leaked customer info to other customers A technical bug on its online banking website and app allowed accidental leakage of customer banking information to other customers. The issue is believed to have lasted between May 24th and…
Ford bug exposed customer and employee records from internal systems A bug on Ford Motor Company’s website allowed access to sensitive systems and proprietary data such as customer databases, employee records, and internal tickets. The data exposure stemmed from a…
This week’s Cyber Security Headlines – Week in Review, August 9-13, 2021, is hosted by Rich Stroffolino with our guest, Ben Sapiro, CISO, Canada Life Cyber Security Headlines – Week in Review is live every Friday at 4pm PT/7pm ET.…
eCh0raix ransomware now targets both QNAP and Synology NAS devices A newly discovered eCh0raix ransomware variant has added support for encrypting both QNAP and Synology Network-Attached Storage (NAS) devices. While it has targeted both QNAP and Synology devices in the…
Actively exploited bug bypasses authentication on millions of routers A critical authentication bypass vulnerability is impacting home routers with Arcadyan firmware that will allow for deployment of Mirai botnet malicious payloads. Tracked as CVE-2021-20090 with a rating of rated 9.9/10,…
