Nearly Half of SMBs, Enterprises Still Using Windows 7: Kaspersky
Data collected by Kaspersky shows that many businesses are still using Windows 7, for which Microsoft plans on ending extended support in just a few months from now.
Asruex Malware Exploits Old vulnerabilities to Infect PDF, Word Docs
A recently observed variant of the Asruex backdoor acts as an infector by targeting old vulnerabilities in Microsoft Office and Adobe Reader and Acrobat 9.x, Trend Micro reports.
Asruex was initially discovered in 2015 and was previously associated with the spyware DarkHotel. In addition to backdoor capabilities, the malware also appears to be able to inject code into Word and PDF files by targeting two old vulnerabilities tracked as CVE-2012-0158 and CVE-2010-2883.
Vulnerability Found in SimpleMDM Apple Device Management Solution
An XML external entity (XXE) vulnerability has been found and patched in the SimpleMDM Apple device management solution, but the researcher who found the flaw and the vendor disagree on its impact.
SimpleMDM is an increasingly popular mobile device management (MDM) solution used by companies such as FedEx, Deloitte and the Discovery Channel.
Cyberattacks on Texas Cities Put Other Governments on Guard
Cyberattacks that recently crippled nearly two dozen Texas cities have put other local governments on guard, offering the latest evidence that hackers can halt routine operations by locking up computers and public records and demanding steep ransoms.
Government agencies that fail to keep reliable backups of their data could be forced to choose between paying ransoms or spending even more to rebuild lost systems. Officials are increasingly turning to cybersecurity insurance to help curb the growing threat.