Breach Of ClickStudios "PASSWORDSTATE" Password Manager - Updated April 27, 2021
Update April 27, 2021
Cybersecurity
Security Awareness – Recent Analysis of Previously Published “Compilation of Many Breaches” (COMB)
A recent sensational headline states that “3.2 billion leaked passwords contain 1.5 million records with government emails,” is indeed notable. However, this is not a new development, nor are these newly leaked credentials. This 100GB “database” was published for free this February in an online cybercrime forum. Dubbed “COMB,” or “Compilation of Many Breaches,” this data set is composed of multiple leaks and breaches across different companies that have occurred over the years.
Joint Cybersecurity Advisory: Russian Foreign Intelligence Service Cyber Operations Trends and Best Practices for Network Defenders
The FBI, the U.S. Department of Homeland Security, and the Cybersecurity and Infrastructure Security Agency (CISA) have published a Joint Cybersecurity Advisory presenting their assessment that Russian Foreign Intelligence Service (SVR) cyber actors – also known as APT29, the Dukes, CozyBear, and Yttirum – will continue to attempt to exploit U.S. and other foreign entities using a range of initial techniques that vary in sophistication, coupled with stealthy intrusion tradecraft within compromised networks. The U.S.
Trend Micro Vulnerability Being Actively Exploited
Cybersecurity firm Trend Micro has disclosed that a threat actor began using a vulnerability in its antivirus products to gain admin rights on Windows systems as part of its attacks. The vulnerability, tracked as CVE-2020-24557, affects the company’s Apex One and OfficeScan XG, two advanced security products aimed at enterprise customers. The vulnerability was discovered last year and patched, but Trend Micro said it learned of incidents where this same bug was weaponized to attack some of its customers.
U.S. Department of Justice Launches Ransomware Task Force
In one of the latest of the federal government’s efforts to address today’s daunting cybersecurity challenges, the U.S. Department of Justice has formed a task force aimed at curtailing the proliferation of ransomware. The task force’s goal is to make these extortion schemes less lucrative by targeting the entire digital ecosystem that supports them. It will increase training and dedicate more resources to the issue, seek to improve intelligence sharing across the department, disrupt command and control infrastructure, and seize profits.
Large Energy Supplier Suffers Data Breach Caused by Unsecured Cloud Storage
A large energy supplier in New England, Eversource, has reported it suffered a data breach due to customers' personal information, including names, social security numbers, and more, being left exposed on an unsecured cloud server. The company discovered the breach during a security review in mid-March, when it found a cloud data storage folder that was misconfigured so that anyone could access its contents. Eversource immediately secured the folder and has stated that there is no indication that any of the data was acquired or misused by unauthorized people.
SonicWall Email Security (ES) - Zero-Day Vulnerabilities being Actively Exploited
What you need to know
OT Cybersecurity – ICS Unicorns are an Endangered Species
It is certainly not impossible to maintain an air gapped control system network, but all too often risk assessments and penetration tests reveal they are a dying breed. Likewise, numerous case studies and research into ICS-focused adversaries reveal many threat groups leveraging IT exploits to traverse into the OT network. Both scenarios confirm the fact that OT and IT cybersecurity need each other for a holistic security posture.
Threat Actors Targeting Cybersecurity Researchers
The Cybersecurity and Infrastructure Security Agency (CISA) has released an advisory noting that Google and Microsoft recently published reports on advanced persistent threat (APT) actors targeting cybersecurity researchers. The APT actors are using fake social media profiles and legitimate-looking websites to lure security researchers into visiting malicious websites to steal information, including exploits and zero-day vulnerabilities.
OT Vulnerability Management – Siemens Releases Multiple Advisories for NAME:WRECK Vulnerability
On Tuesday, Siemens released five advisories related to vulnerabilities in its products used in industrial environments regarding the NAME:WRECK vulnerability disclosed by Forescout that same day.
Pages
