SecurityWeek
Acronis Worth Over $1 Billion After Raising $147 Million
Acronis on Wednesday announced that it raised $147 million. With this funding round, led by Goldman Sachs, Acronis becomes a unicorn company with a valuation exceeding $1 billion.
GitHub Becomes CVE Numbering Authority, Acquires Semmle
Microsoft-owned GitHub announced on Wednesday that it has acquired code analysis platform provider Semmle and the company is now a Common Vulnerabilities and Exposures (CVE) Numbering Authority.
300 More Chinese Arrested in Philippines Crackdown
Philippines immigration agents, backed by troops, have arrested more than 300 Chinese for alleged cyber crimes, a week after a similar number were detained during a raid linked to investment fraud.
The Bureau of Immigration late Tuesday said 324 Chinese nationals were arrested in Puerto Princesa City on Palawan island during Monday's operation.
Emotet Returns, Spreads via Hijacked Email Conversations
Following a 4-month vacation, Emotet’s operators are back at it, borrowing a recently introduced spear-phishing technique to deliver their malware: hijacking legitimate email conversations.
Top 10 Tactical Recommendations for SMB Cybersecurity
In my previous column I introduced the concept of “Think 360, Demand 360” as it applies to data protection, privacy, and cyber security.
Facebook Takes Down Misleading Campaigns From Iraq, Ukraine
Facebook this week announced that it removed multiple pages, groups, and accounts engaged in misleading behavior on the social platform.
Code Execution Vulnerabilities Found in Aspose PDF Processing Product
Several critical remote code execution vulnerabilities have been found by Cisco Talos researchers in a PDF file processing product from Aspose.
Supply Chain Likely Target in Attacks by Tortoiseshell Group on Saudi IT Firms
A previously undocumented attack group, given the name the Tortoiseshell Group, is targeting middle eastern IT firms in an apparent supply chain move against their customers. Researchers at Symantec have discovered 11 IT firms, mostly in Saudi Arabia, that have been hit by the group.
'Panda' Group Makes Thousands of Dollars Using RATs, Crypto-Miners
A new threat actor has generated thousands of dollars in the Monero cryptocurrency using remote access tools (RATs) and illicit cryptocurrency mining malware, Cisco’s Talos threat intelligence and research group revealed on Tuesday.
US Justice Department Sues Snowden Over New Book
The US Justice Department on Tuesday filed a lawsuit against Edward Snowden seeking to prevent the former CIA employee and National Security Agency contractor from profiting from his new book.
Industry Reactions to Massive Ecuador Data Leak
Researchers at vpnMentor have discovered an unprotected database apparently storing information on nearly everyone in Ecuador, including children and deceased individuals.
Malware Sandboxing Firm VMRay Raises $10 Million
Bochum, Germany-based VMRay has closed a $10 million Series B funding round led by Digital+ Partners, bringing the total raised to date to just under $14 million. The money will be used in both marketing and R&D. R&D is based in Germany, while all customer-facing operations are run from Boston, Mass.
Linux Crypto-Miner Uses Kernel-Mode Rootkits for Evasion
A recently discovered cryptocurrency mining malware targeting Linux machines is employing kernel-mode rootkits in an attempt to make detection more difficult, Trend Micro reveals.
AMD Radeon Driver Flaw Leads to VM Escape
A vulnerability in the AMD ATI Radeon ATIDXX64.DLL driver could be triggered from within a VMware guest to execute code on the host, Cisco Talos warns.
Oracle Launches New Services to Secure the Cloud
Oracle this week expanded its portfolio with three new services designed to help automatically protect cloud workloads and data.
Australia Knows China Hacked Its Parliament: Report
Australia is confident that China was behind cyberattacks on its parliament and political parties, but decided not to make public accusations to avoid disrupting trade relations, according to Reuters.
SOHOpelessly Broken 2.0: 125 Vulnerabilities Found in Routers, NAS Devices
Researchers have discovered many vulnerabilities in over a dozen small office/home office (SOHO) routers and network-attached storage (NAS) devices as part of a project dubbed SOHOpelessly Broken 2.0.
Security Firm: Data Breach Exposes Millions of Ecuadorians
Millions of Ecuadorians are at risk of identity theft because a security breach exposed a trove of data including names, phone numbers and birth dates, a cyber security firm said Monday.
InnfiRAT Targets Personal Data, Cryptocurrency Wallets
A newly discovered remote access Trojan can steal various types of data from the infected machines, including personal data and cryptocurrency wallet information, Zscaler security researchers warn.