Buer malware rewritten in Rust language to curb detection Data Breach by Bradley Barth - May 7, 20210 Ferris, the Rust mascot Developers of the malicious downloader Buer have taken the unusual step of rewriting the malware in a lesser-known Rust programming language, presumably to avoid detection while also potentially slowing down investigative analysis. While it’s fairly common to find malware written in C, C+, Python and Java, threat
21 vulnerabilities in Exim mail server leave web, cloud operations exposed Data Breach by Steve Zurier - May 5, 20210 Promotional item put out by the Digital Equipment Corporation to promote the UNIX operating system. Twenty-one vulnerabilities were discovered in Exim Internet Mailer, a popular mail transfer agent (MTA) that’s available for major Unix-like operating systems. (KHanger/CC BY 3.0/https://commons.wikimedia.org/wiki/File:UNIX-Licence-Plate.JPG) Researchers Tuesday released a study that found 21 unique vulnerabilities in
Amazon announces it’s open sourcing DeepRacer device software Tech and Gaming Blog Technology by Ron Miller - April 27, 20210 When Amazon debuted AWS DeepRacer in 2018, it was meant as a fun way to help developers learn machine learning. While it has evolved since and incorporated DeepRacer competitions, today the company announced it was adding a new wrinkle. It’s open sourcing the software the company created to run these
Cigent gets $7.6 million to reimagine data protection at the file level Data Breach by Derek B. Johnson - April 27, 20210 The Cigent team at the company headquarters. Cigent emerged from stealth this morning with $7.6 million in funding. Cigent might be the only cybersecurity startup where the founders proudly tell you how disinterested they are in designing products that prevent threat actors from breaking into your systems. This is not due to
Vendors are getting better at spotting malicious execution techniques Data Breach by Bradley Barth - April 22, 20210 Mitre Engenuity – The Mitre Corporation’s tech foundation for public good – released the results of its independent evaluation of 29 vendors to see how their products were able to detect and in some cases block known Mitre ATT&CK techniques. Check Point Software Solutions had the most detections: 330 across
No more snack attacks? Mondelez hopes new security training will prevent the next ‘NotPetya’ Data Breach by Bradley Barth - April 16, 20210 Mondelez International, maker of such brands as Oreo, Ritz and Sour Patch Kids, is in the midst of rolling out a video-based security awareness and training program. The 2017 NotPetya supply-chain wiper attack hit $26.6 billion global food company Mondelez International hard, sidelining Windows-based computers and disrupting its distribution. Sure, APT attacks
Should Dell have pursued a more aggressive debt-reduction move with VMware? Tech and Gaming Blog Technology by Ron Miller - April 15, 20210 When Dell announced it was spinning out VMware yesterday, the move itself wasn’t surprising; there had been public speculation for some time. But Dell could have gone a number of ways in this deal, despite its choice to spin VMware out as a separate company with a constituent dividend instead
No more snack attacks? Mondelez hopes new security training will prevent the next ‘NotPetya’ Data Breach by Bradley Barth - April 15, 20210 Mondelez International, maker of such brands as Oreo, Ritz and Sour Patch Kids, is in the midst of rolling out a video-based security awareness and training program. The 2017 NotPetya supply-chain wiper attack hit $26.6 billion global food company Mondelez International hard, sidelining Windows-based computers and disrupting its distribution. Sure, APT attacks
Ransomware’s evolving tools and technical tactics confuse forensic analysis Data Breach by Bradley Barth - April 12, 20210 There has been an uptick in sophisticated ransomware intrusions where the Active Directory is compromised, according to a recent panel discussion. (““Active Directory” by arrayexception is licensed under CC BY-SA 2.0) The cybersecurity community paid close attention to ransomware actors’ escalation of business tactics in the last year, including double extortion, forming cartels and contacting
Got your covid shots? You might have to prove it. Tech and Gaming Blog Technology by Lindsay Muscato - April 10, 20210 As covid vaccines roll out in a handful of countries, the next question has become: How do people prove they’ve been inoculated? For months, this conversation—and the ethical questions any “vaccine passport” system would raise—has been theoretical, but over the last few weeks, efforts have become more concrete. Australian airline