Government reveals there has been no indication its systems or the country’s critical information infrastructures have been severely impacted by the SolarWinds supply chain breach.

Two of the flaws (CVE-2021-25274 and CVE-2021-25275) were identified in the SolarWinds Orion Platform, while a third separate weakness (CVE-2021-25276) was found in the Serv-U FTP server for Windows.

Dubbed Operation LadyBird, Emotet’s infrastructure was taken down by the joint collaboration between law enforcement agencies from the U.S., the U.K, Canada, along with Europol and Eurojust.

Dubbed Oscorp, the malware abuses accessibility services in Android devices to steal user credentials and media content. The malware gets its name from the title of the login page of its C2 server. 

Data of as many as 8,700 clients has been impacted and Ramsey County is not the only local government affected by this attack. In some cases, the Social Security number may also have been exposed.

Once the malware has landed on a supercomputer, the code buries itself in an OpenSSH server executable and will trigger the backdoor if a call is made through a specific TCP source port.

At least one major ransomware gang is abusing vulnerabilities in the VMWare ESXi product to take over virtual machines deployed in enterprise environments and encrypt their virtual hard drives.

Security researchers on Tuesday uncovered new delivery and evasion techniques adopted by Agent Tesla remote access trojan (RAT) to get around defense barriers and monitor its victims.

Affected data included information maintained within the company’s personnel records – including critical data like Social-Security numbers, driver’s license numbers, and passport numbers.

The NCSC wrote that U.S. health data was an attractive target for the Chinese government due to the diversity of the population and because of the nation’s comparably lax safeguards for personal data.