The U.S. has issued an emergency warning after Microsoft said it caught China hacking into its mail and calendar server program, called Exchange.
The perpetrator, Microsoft said in a blog post , is a hacker group that the company has "high confidence" is working for the Chinese government and spies primarily on American targets. The latest software update for Exchange blocks the hackers, prompting the U.S. Cybersecurity and Infrastructure Security Agency, or CISA, to issue a rare emergency directive that requires all government networks do so.
This may worth something:
North Dakota suspects Chinese hackers had control of public email servers during cyberattack |
"The fact of the matter is that we don't know what (Hafnium) did once they had the (hacking tools) on the servers," Ivahnenko said in a text message. "They may have just installed them and never touched them. They may have done something different on each computer they touched. What they did when they had control is still under investigation."
Bismarck Mayor Steve Bakken said the capital city's servers were not breached, but he was aware of the situation. Burleigh County Commission Chairwoman Kathleen Jones did not respond to a request for comment.
Chester Upland School District Says Hackers Took Millions – NBC10 Philadelphia
A law enforcement investigation is underway Friday after a school district reported it was missing an expected multimillion-dollar payment from the state, and a district official speculated it was due to hackers.
The receiver of the Chester Upland School District, Juan Baughn, told the Philadelphia Inquirer Thursday that "millions" were lost due to a "cyber issue."
A spokeswoman for the Delaware County District Attorney's office told NBC10 there is an active investigation into the claims, but could not comment further.
Three Top Russian Cybercrime Forums Hacked — Krebs on Security
At the top of a 35-page PDF leaked online is a private encryption key allegedly used by Maza administrators. The database also includes ICQ numbers for many users. ICQ, also known as “I seek you,” was an instant message platform trusted by countless early denizens of these older crime forums before its use fell out of fashion in favor of more private networks, such as Jabber and Telegram .
This is notable because ICQ numbers tied to specific accounts often are a reliable data point that security researchers can use to connect multiple accounts to the same user across many forums and different nicknames over time.
Other things to check out:
How Apple's locked down security gives extra protection to the best hackers | MIT Technology
You've heard of Apple's famous walled garden, the tightly controlled tech ecosystem that gives the company unique control of features and security. All apps go through a strict Apple approval process, they are confined so sensitive information isn't gathered on the phone, and developers are locked out of places they'd be able to get into in other systems. The barriers are so high now that it's probably more accurate to think of it as a castle wall.
Virtually every expert agrees that the locked-down nature of iOS has solved some fundamental security problems, and that with these restrictions in place, the iPhone succeeds spectacularly in keeping almost all the usual bad guys out. But when the most advanced hackers do succeed in breaking in, something strange happens: Apple's extraordinary defenses end up protecting the attackers themselves.
Social Engineering Attacks Hacking Humans Today - Security Boulevard
Social Engineering Changes
Chris began by discussing how social engineering has changed over the past year and what it looks like today.
" Even though it [social engineering] has been around since humans have been communicating, threat actors have been using horrible, catastrophic events of the past five years to start fake charities and scam people out of money. And now, with the COVID-19 pandemic, this attack surface has expanded into a global one.
* * *
" I believe we have now reached the most dangerous point in cybersecurity history to date. The broad amount of affordable computing power, legitimate infrastructure, open-source information, and sophisticated technology combine to make a recipe for an environment that is not good. Already, there has been a 3,000% increase in phishing attacks across communications channels ," he said.
Bloomberg - Are you a robot?
Happening on Twitter
As Pope Francis flies to Iraq, US Embassy Baghdad issues a security alert warning of a threat of "drone & missile a… https://t.co/hyteoQydu6 LizSly (from Beirut, Iraq, Syria if only) Fri Mar 05 08:10:44 +0000 2021
U.S. issues warning after @Microsoft says #China hacked its mail server program - NBC News https://t.co/FafmUUoxco FranTownsend Thu Mar 04 03:40:34 +0000 2021
No comments:
Post a Comment