BleepingComputer reports that some Palo Alto Networks firewall, XDR, and VPN offerings have been impacted by a high-severity OpenSSL vulnerability, tracked as CVE-2022-0778, which could be exploited to prompt a denial of service condition.
Threat actors have been leveraging the novel FFDroider information stealer to exfiltrate browser-stored credentials and cookies and proceed in compromising targets' social media accounts, according to BleepingComputer.
Ukraine's State Service of Special Communication and Information Protection has issued a warning regarding new cyberattacks from the UAC-0094 threat cluster that have been targeting Telegram accounts, The Hacker News reports.
In its annual Data Security and Incident Response report, law firm BakerHosteler said the average ransom payment of its clients who experienced a ransomware attack declined as the average time it takes negotiating ransoms increased.
Attackers are targeting the systems that control access. This includes Active Directory, Azure AD, and recently Okta. Once they have access to identity, attackers can move onto systems that provide access to data and persistence.
The rate of businesses experiencing downtime rose from 50% in 2020 to over 75% in 2021, while system crashes were the most common reason for downtimes, followed by human error, cyberattacks, and insider attacks, reports TechRadar.
Antimatter announced its exit from stealth mode with $12 million raised in a Series A funding round, allowing the company to begin private beta for its service, which allows software-as-a-service firms to guarantee their customers' data security.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
