COVID-19 Vaccine Cyberattacks Steal Credentials, Spread Zebrocy Malware

Cybercriminals are leveraging the recent rollout of the COVID-19 vaccines globally in various cyberattacks - from stealing email passwords to distributing the Zebrocy malware. Source: Threadpost

D-Link Routers at Risk for Remote Takeover from Zero-Day Flaws

Critical vulnerabilities discovered by Digital Defense can allow attackers to gain root access and take over devices running same firmware. Source: Threadpost

Google Patches Critical Wi-Fi and Audio Bugs in Android Handsets

Google updates its mobile OS, fixing ten critical bugs, including one remote code execution flaw. Source: Threadpost

FireEye Cyberattack Compromises Red-Team Security Tools

An attacker stole FireEye's Red Team assessment tools that the company uses to test its customers’ security. Source: Threadpost

Divers Pull Rare Surviving WWII Enigma Cipher Machine from Bottom of the Baltic

This sealogged Nazi machine will undergo restoration. Source: Threadpost

Microsoft Wraps Up a Lighter Patch Tuesday for the Holidays

Nine critical bugs and 58 overall fixes mark the last scheduled security advisory of 2020. Source: Threadpost

Apple Manufacturer Foxconn Confirms Cyberattack

Manufacturing powerhouse confirmed North American operations impacted by November cyberattack. Source: Threadpost

The Remote-Work Transition Shifts Demand for Cyber Skills

According to Cyberseek, an interactive mapping tool that tracks the current state of the security job market, there are more than half a million open cybersecurity positions available in the U.S....

Critical, Unpatched Bugs Open GE Radiological Devices to Remote Code Execution

A CISA alert is flagging a critical default credentials issue that affects 100+ types of devices found in hospitals, from MRI machines to surgical imaging. Source: Threadpost

Adobe Warns Windows, macOS Users of Critical-Severity Flaws

Adobe fixed three critical-severity flaws in Adobe Prelude, Adobe Experience Manager and Adobe Lightroom. Source: Threadpost