Satan Ransomware Expands Portfolio of Exploits
A recently observed Satan ransomware variant has added exploits to its portfolio and is looking to compromise more machines by targeting additional vulnerabilities.
First observed in early 2017, the malware has received constant updates to more effectively compromise machines and maximize the attackers’ profits. One of the observed campaigns, Fortinet’s security researchers note, also employed a cryptominer.
Google Starts Tracking Zero-Days Exploited in the Wild
Google Project Zero has started tracking zero-day vulnerabilities exploited in attacks before the impacted vendor released patches.
The new project, named 0Day ‘In the Wild’, is basically a spreadsheet that Project Zero uses to track vulnerabilities exploited before they became known to the public or the vendor.
US Warns Chinese Drones May Steal Data: Report
Washington has warned that Chinese-made drones could be giving spy agencies in Beijing "unfettered access" to stolen data, according to a report in American media.
The Department of Homeland Security sent out an alert on Monday flagging drones built in China as a "potential risk to an organization's information", CNN reported.
Facebook Partially Restores Privacy Feature Abused in Massive Breach
Last week Facebook informed users that it has partially restored a privacy feature abused by hackers last year as part of an attack that impacted 29 million accounts.
DHS Highlights Common Security Oversights by Office 365 Customers
As organizations migrate to Microsoft Office 365 and other cloud services, many fail to use proper configurations that ensure good security practices, the U.S. Department of Homeland Security's (DHS) Cybersecurity and Infrastructure Security Agency (CISA) warns.