Malware

Related Videos

Understanding and Preparing for the Next Log4j – Benny Lakunishok – CSP #57

February 15, 2022

The issues created by the recently disclosed Log4j vulnerability are bigger than you might expect and will have long-lasting implications. So, what was the Log4j vulnerability really, what can be done to reduce the risk it poses to organizations, and how can we better prepare for the next Log4j-level event? Benny Lakunishok, co-founder and CEO of Z...

Vulnerability Management

Ukraine, Blackbyte v. The 49ers, Malicious Mods, Adobe 0-Day, & Teams Bugs – SWN #187

February 15, 2022

This week in the Security News: The Ukraine, Defender, Mimikatz, Chrome, Blackbyte, Cities Skylines, Adobe, and Teams, along with special guest commentator Aaran Leyland on this Edition of the Security Weekly News!

A chip and pin debit console is seen February, 23, 2006, in Manchester, England. (Photo Illustration by Christopher Furlong/Getty Images)

Malware

Threat actors use payment skimmer to attack more than 500 e-commerce stores

Steve ZurierFebruary 10, 2022

Researchers say e-commerce stores running the outdated Magento 1 e-commerce platform were targeted via SQL injection and PHP object injection attacks.

Malware

PrivateLoader leveraged to spread various malware

SC StaffFebruary 9, 2022

Numerous malware strains, including Smokeloader, Vidar, and Redline, have been executed using the PrivateLoader pay-per-install loader since last May.

Linux-based systems are targeted by cybercriminals to maximize their impact with minimal effort, said a VMWare’s senior director of threat intelligence. (“VMware Booth” by glennharper is licensed under CC BY-NC-ND 2.0)

Cloud Security

Threat actors view Linux servers as their ticket to accessing multi-cloud environments

Steve ZurierFebruary 9, 2022

VMware research says 89% of cryptojacking attacks use XMRig-related libraries and 50% of Cobalt Strike users may be cybercriminals.

Cloud Security

Report shows latest evolution of UpdateAgent malware

SC StaffFebruary 8, 2022

Since its emergence in September 2020, the Mac trojan UpdateAgent has evolved from a basic information stealer to become a second-stage payload distributor observed in various attacks last year, now also capable of hosting its payloads in the public cloud.

Vulnerability Management

Getting Zucked, Underused MFA, Elementor RCE, & LinkedIn – Wrap Up – SWN #184

February 4, 2022

In this episode, Dr. Doug talks: Zuck gets zucked, MFA threats, DHS, Elementor, LinkedIn, and all the show Wrap-Ups for this week on the Security Weekly News!

Endpoint/Device Security

Major device vendors face 23 UEFI firmware vulnerabilities

Steve ZurierFebruary 2, 2022

Researchers say attackers can use the bugs in the Unified Extensible Firmware Interface (UEFI) to launch code execution with system management mode privileges.

Malware

Related Videos

Lessons from Ukraine: How cyberwar shapes security at home

Understanding and Preparing for the Next Log4j – Benny Lakunishok – CSP #57

Ukraine, Blackbyte v. The 49ers, Malicious Mods, Adobe 0-Day, & Teams Bugs – SWN #187

Threat actors use payment skimmer to attack more than 500 e-commerce stores

PrivateLoader leveraged to spread various malware

Threat actors view Linux servers as their ticket to accessing multi-cloud environments

Report shows latest evolution of UpdateAgent malware

Getting Zucked, Underused MFA, Elementor RCE, & LinkedIn – Wrap Up – SWN #184

Major device vendors face 23 UEFI firmware vulnerabilities

Fast Five

Selected by the SC Media Editorial team every Tuesday.