Author: admin

The unauthorized third party stole employee and business customers’ data

The DoJ’s Lisa Monaco urges organizations to work with the federal government following cyber-incidents

Sophos warns against simple interpretation of the data

National Crime Agency says big tech partnership is working

If you have the product, but you haven’t patched – well, the crooks have now landed, so please don’t delay. Do it today…

More than 65,000 container images also at risk

Following a report on its activities, the Israeli spyware company QuaDream has shut down.

This was QuadDream:

Key Findings

• Based on an analysis of samples shared with us by Microsoft Threat Intelligence, we developed indicators that enabled us to identify at least five civil society victims of QuaDream’s spyware and exploits in North America, Central Asia, Southeast Asia, Europe, and the Middle East. Victims include journalists, political opposition figures, and an NGO worker. We are not naming the victims at this time.
• We also identify traces of a suspected iOS 14 zero-click exploit used to deploy QuaDream’s spyware. The exploit was deployed as a zero-day against iOS versions 14.4 and 14.4.2, and possibly other versions. The suspected exploit, which we call ENDOFDAYS, appears to make use of invisible iCloud calendar invitations sent from the spyware’s operator to victims.
• We performed Internet scanning to identify QuaDream servers, and in some cases were able to identify operator locations for QuaDream systems. We detected systems operated from Bulgaria, Czech Republic, Hungary, Ghana, Israel, Mexico, Romania, Singapore, United Arab Emirates (UAE), and Uzbekistan.

I don’t know if they sold off their products before closing down. One presumes that they did, or will.

Shipbuilder said the incident affected its email server and some network operations

Phishing websites and session hijacking attacks were used to access Facebook and other accounts.

The US government has for security to become a standard component of computer science courses. Infosecurity investigates how this can be achieved