Researchers Disclose More Malware Used in SolarWinds Hack

Scott Ferguson • March 4, 2021

Researchers with Microsoft and FireEye are disclosing additional malware used by the hacking group that targeted SolarWinds last December. These second-stage malware variants appear to have been deployed after organizations downloaded the "Sunburst" backdoor hidden in a software update.

Application Security

Lazarus Hits Defense Firms with ThreatNeedle Malware

Latest

3rd Party Risk Management

Accellion Appliance Zero-Day Attack Breaches: Key Takeaways

Anna Delaney • March 5, 2021

This edition of the ISMG Security Report features an analysis of key takeaways from the breaches tied to flaws in the Accellion File Transfer appliance. Also featured: Equifax CISO Jamil Farshchi on transforming supply chain security, plus an analysis of how "work from anywhere" is affecting cybersecurity.

Governance & Risk Management

Lesson From SolarWinds Attack: It's Time to Beef Up IAM

Scott Ferguson • March 4, 2021

The SolarWinds supply chain attack should prompt federal agencies and others to rethink how they approach security issues - especially identity and access management, according to a breakdown of the attack presented this week by NIST and CISA.

Breach Notification

Qualys Gets 'Clopped' by Accellion-Exploiting Attackers

Mathew J. Schwartz • March 4, 2021

Qualys has confirmed that its Accellion File Transfer Appliance software was breached by zero-day-wielding attackers after stolen customer data appeared on the Clop ransomware gang's data leaks site. The security firm's public breach notification comes more than two months after the firm first learned it had been...

Identity & Access Management

Okta to Buy Auth0 for $6.5 Billion

Doug Olenick • March 4, 2021

The security firm Okta shook up the identity and access management market Wednesday by announcing a $6.5 billion deal to acquire the customer IAM technology supplier Auth0. Two other cybersecurity M&A deals were also announced this week.

Breach Notification

Russian Cybercrime Forum 'Maza' Suffers Data Breach

Akshaya Asokan • March 4, 2021

The Russian carding and fraud discussion forum Maza has been breached, and hackers have leaked what appear to be legitimate members' details, including email addresses and forum credentials, threat-intelligence firms report. The breach and data leak follows a recent wave of attacks against cybercrime forums.

Identity & Access Management

Changing Authentication for Employees

Suparna Goswami • March 4, 2021

New authentication models, including dynamic authorization and continuous authentication, that work well for consumers can be adopted for employees as well, says Thomas Malta, head of identity and access management at the Virginia-based Navy Federal Credit Union.

Governance & Risk Management

Google Patches Zero-Day Vulnerability in Chrome

Akshaya Asokan • March 4, 2021

Google has rolled out patches for a zero-day vulnerability in the popular web browser Chrome that's being exploited in the wild.

3rd Party Risk Management

GAO Report Highlights Need for Centralized Cyber Leadership

Scott Ferguson • March 3, 2021

A lack of centralized leadership, especially at the White House level, is hindering the federal government's ability to address numerous cybersecurity issues, including the SolarWinds supply chain attack that affected federal agencies and others, according to a new GAO report.

Application Security

Microsoft Patches Four Zero-Day Flaws in Exchange

Jeremy Kirk • March 3, 2021

Microsoft issued emergency software patches on Tuesday for four zero-day vulnerabilities in its Exchange email server. The alarming vulnerabilities could allow a remote attacker into Exchange and possibly enable further lateral movement.

Governance & Risk Management

Cybersecurity Leadership: Identity, Access, Complexity

Tom Field • March 3, 2021

In this era of "work from anywhere," identity and access management solutions are challenged more than ever. What are the strategies and solutions recommended by top CEOs and CISOs in the cybersecurity sector? An expert panel weighs in.

Cyberwarfare / Nation-State Attacks

Lazarus Group Tied to TFlower Ransomware

Akshaya Asokan • March 3, 2021

The Lazarus Group, a North Korean hacking operation also known as Hidden Cobra, is deploying TFlower ransomware, using its MATA malware framework, security firm Sygnia reports.

Artificial Intelligence & Machine Learning

AI Supremacy: Russia, China Could Edge Out US, Experts Warn

Scott Ferguson • March 2, 2021

The U.S. is in danger of falling behind China and Russia in developing artificial intelligence technologies and countering cybersecurity threats that could develop as AI use becomes more widespread, according to a newly released report from the National Security Commission on Artificial Intelligence.