Treasury Department’s senior leaders were targeted by SolarWinds hack The SolarWinds hack continues to reveal its reach. The email system used by the Treasury Department’s most senior leadership suffered what it describes as “a serious breach, beginning in July, the…

SolarWinds supply chain attack updates The US government and high profile companies struggle to assess and control the damage from the SolarWinds attack which has compromised a range of agencies including the NNSA – the US Nuclear Agency. Items of…

Microsoft seizes SolarWinds domain – quarantine starts today The move was made to seize and sinkhole the avsvmcloud[.]com domain that played a central role in the SolarWinds hack. The domain served as command and control server for malware that was…

Adrozek malware can infect over 30K Windows PCs a day This new credential-stealing malware injects ads into search engine results pages often on top of legitimate ads from search engines in order to hijack Microsoft Edge, Google Chrome, Yandex Browser,…

Microsoft’s December 2020 Patch Tuesday fixes 58 vulnerabilities With the December 2020 Patch Tuesday security updates release, Microsoft has released fixes for 58 vulnerabilities and one advisory for Microsoft products. Of the vulnerabilities fixed yesterday, nine are classified as Critical,…

Drug dealers offer Pfizer vaccine on the Dark Web With the United Kingdom becoming the first Western country to authorize a Covid-19 vaccine and announce distribution plans and the first doses expected to be rolled out next week, numerous darknet…

US Supreme Court eyes narrowing of CFAA Continuing a story we covered on Monday, the Supreme Court has indicated serious reservations about the ambiguity and scope of the nation’s only major cybercrime law, hinting it may narrow the law’s applicability…

Biden transition team forced to build its own cybersecurity protections The Trump administration is blocking many of the transition-related resources usually provided to a president-elect, including government email accounts, despite concerns that the team is likely a top espionage target…

GoDaddy employees duped in cryptocurrency hack Social engineering was used to trick GoDaddy employees into transferring ownership and control over several cryptocurrency domains. This attack, which, according to Krebs on Security, happened on November 13, is the latest in a…

Trump fires CISA director Chris Krebs Krebs served as the director of the Cybersecurity and Infrastructure Security Agency (CISA) since its founding in November 2018. Mr. Trump fired him in a tweet late on Tuesday, citing a statement published by…