Pfizer COVID-19 Vaccine Targeted in EU Cyberattack

Threat actors accessed Pfizer vaccine documentation submitted to EU regulators in the latest cyberattack trying to profit off pandemic suffering.   Source: Threadpost

MoleRats APT Returns with Espionage Play Using Facebook, Dropbox

The threat group is increasing its espionage activity in light of the current political climate and recent events in the Middle East, with two new backdoors. Source: Threadpost

PLEASE_READ_ME Ransomware Attacks 85K MySQL Servers

Ransomware actors behind the attack have breached at least 85,000 MySQL servers, and are currently selling at least compromised 250,000 databases. Source: Threadpost

Critical Cisco Jabber Bug Gets Updated Fix

A series of bugs, patched in September, still allow remote code execution by attackers. Source: Threadpost

Cyber Monday is Every Monday: Securing the ‘New Normal’

From eCommerce threats, to attacks at the smart edge, Fortinet researchers discuss the top evolving threats of 2020, heading into the new year. Source: Threadpost

Misery of Ransomware Hits Hospitals the Hardest

Ransomware attacks targeting hospitals have exacted a human cost as well as financial. Source: Threadpost

Critical Steam Flaws Could Let Gamers to Crash Opponents’ Computers

Valve fixed critical bugs in its Steam gaming client, which is a platform for popular video games like Counter Strike: Global Offensive, Dota2 and Half Life. Source: Threadpost

The story of the year: remote work

The coronavirus pandemic has caused sudden, sweeping change around the world. The necessary social distancing measures are having an impact on all of us. One large part of society that has...

Record Levels of Software Bugs Plague Short-Staffed IT Teams in 2020

As just one symptom, 83 percent of the Top 30 U.S. retailers have vulnerabilities which pose an “imminent” cyber-threat, including Amazon, Costco, Kroger and Walmart. Source: Threadpost

SideWinder APT Targets Nepal, Afghanistan in Wide-Ranging Spy Campaign

Convincing email-credentials phishing, emailed backdoors and mobile apps are all part of the groups latest effort against military and government targets. Source: Threadpost