New ISIS Cybersecurity Bulletin Shows Interest in Microsoft BlueKeep Bug
NSA stressed that "we have seen devastating computer worms inflict damage ...with wide-ranging impact." Keep Reading
Government Sector in Central Asia Targeted with New HAWKBALL Backdoor Delivered Via Microsoft Office Vulnerabilities
HAWKBALL is capable of surveying the host, creating a named pipe to execute native Windows commands, terminating processes, creating, deleting and uploading files. Keep Reading
RDP Stands for ‘Really DO Patch!’: Understanding the Wormable RDP Vulnerability CVE-2019-0708
The bulletin referenced well-known network worm “WannaCry” which was heavily exploited just a couple of months after Microsoft released MS17-010 as a patch for the related vulnerability in March 2017. Keep Reading
Microsoft Outlook Email Breach Targeted Cryptocurrency Users
The breach centered around a hacker getting hold of a Microsoft customer support worker’s login credentials; from there, the hacker could dive in. Keep Reading
Several Cryptojacking Apps Found on Microsoft Store
The apps—which included those for computer and battery optimization tutorial, internet search, web browsers, and video viewing and download—came from three developers. Keep Reading
Internet Explorer Scripting Flaw Still a Threat to Unpatched Systems
A remote attacker can target Internet Explorer Versions 9 through 11 via a specially crafted website, while a local attacker on a rogue network could also target the Web Proxy Auto-Discovery service. Keep Reading
Oracle Files Injunction Against DoD’s $10B JEDI Cloud Contract
The Dec. 6 complaint against the Joint Enterprise Defense Infrastructure program comes a month after the GAO dismissed Oracle’s formal protest that the DOD’s winner-take-all contract will unduly restrict competition. Keep Reading
General Dynamics IT Business to Deliver Cloud Services to Navy
General Dynamics Information Technology will deliver commercial cloud services to the Navy through the General Services Administration’s Schedule 70, which includes Amazon Web Services (AWS) and Microsoft Azure. Keep Reading
Chinese Cyber Espionage Group Targeting Japanese Corporations Using Updated TTPs
In this campaign, the group sent spear phishing emails containing malicious documents that led to the installation of the UPPERCUT backdoor. Keep Reading
DHS, FBI Hold Joint Briefing for Election Officials with Facebook and Microsoft
Call provided opportunity to connect private and public officials to share information on actions being taken to combat threats to our elections and to our democracy. Keep Reading
