MalwareShadow attacks let hackers replace content in digitally-signed PDFJill AitoroFebruary 23, 2021
BreachGoogle Alerts used to launch fake Adobe Flash Player updaterSteve ZurierFebruary 22, 2021The threat actors are “quite clever” in using Google Alerts as an attack vector to prompt users to "update" Adobe Flash Player.
Application securityPhishing campaign alters prefix in hyperlinks to bypass email defensesBradley BarthFebruary 19, 2021Better integration between email and web security systems could serve as a defense.
BreachPayment processor used by government hit by ‘Cuba’ ransomware gangSteve ZurierFebruary 19, 2021The Cuba ransomware gang launched assaults in February on a payment processor widely used by many state and municipal agencies across the United States to manage utility bills and driver’s license data.
BreachSecond malware strain targeting Apple’s new M1 chip identifiedSteve ZurierFebruary 18, 2021In just three months, hackers have debuted at least two strains of malware designed to attack Apple’s new chip.
MalwareThe Egregor takedown: New tactics to battle ransomware groups show promiseBradley BarthFebruary 18, 2021Ransomware ringleaders and their customers have been put on notice: they may not be as untouchable as they thought.