While the Colonial Pipeline attack was still underway, the US government moved quickly to declare a state of emergency for the affected sector: a first in terms of speed and scope of response.

The pandemic has become a catalyst for a “boom” in the growth of online account ownership — but has potentially also undermined consumer security, as per a new study by Morning Consult for IBM.

Three weeks after company disclosed two critical vulnerabilities in the workload management utility, many organizations have not patched the technology yet, security firm Trustwave says.

Malware actors increasingly luring victims under the pretense of popular apps and brands. A malware infection impersonating Kaspersky’s antivirus product for Android was launched attacks against its users via third-party app marketplaces.

The code, which was shared on a Russian-speaking forum called XSS, represents the second major ransomware strain whose source code was leaked in recent years after the Dharma code leak in early 2020.

Underground malware domain Cyberium was spotted hosting an active Mirai variant to exploit an RCE in Tenda routers. Experts found several campaigns going back to as early as May 2020. It has been in action for the past year and appears to be still active.

Yaser Balaghi, a cybercriminal working for Iran attacked the computer of a former IDF chief of staff and gained access to his entire computer database, says Times of Israel.

Google announced that it’s rolling out client-side encryption to Google Workspace, thereby giving its users direct control of encryption keys and the identity service they choose to access those keys.

The attack on Global IT service provider SITA, which serves 90% of airlines worldwide, was traced back to the Chinese APT41 group. Experts say it is possible that more SITA customers could identify and reveal the breach impact on their ends in the coming few weeks.