Two bugs, now patched except in older versions, could be chained to allow attackers to hijack Zimbra server by simply sending a malicious email.
Threatpost
Security
No More Ransom Saves Victims Nearly €1 billion Over 5 Years
No More Ransom is collecting decryptors so ransomware victims don’t have to pay to get their data back and attackers don’t get rich.
Podcast: IoT Piranhas Are Swarming Industrial Controls
Enormous botnets of IoT devices are going after decades-old legacy systems that are rife in systems that control crucial infrastructure.
Threatpost
Endpoint Security Is More Important Than Ever
When BYOD hit the scene, mobile device management (MDM) became essential. Now, with IoT and IIoT added to the mix, there are many more attack vectors being used to launch malware campaigns or zero-day…
Kaseya Obtains Universal Decryptor for REvil Ransomware
The vendor will work with customers affected by the early July spate of ransomware attacks to unlock files; it’s unclear if the ransom was paid.
Threatpost
FIN7’s Liquor Lure Compromises Law Firm with Backdoor
Using a lure relating to a lawsuit against the owner of Jack Daniels whiskey, the cybergang launched a campaign that may be bent on ransomware deployment.
Threatpost
5 Steps to Improving Ransomware Resiliency
Alex Restrepo, cybersecurity researcher at Veritas, lays out the key concepts that organizations should be paying attention to now and implementing today.
Threatpost
Discord CDN and API Abuses Drive Wave of Malware Detections
Targets of Discord malware expand far beyond gamers.
Threatpost
2021 Top Breaches: Part II
Q2, 2021 saw the Colonial Pipeline breach, the JBS breach, fallout from the Microsoft Exhchange breach, a massaive Facebook data leak, another large health system breach and more municipal breaches.
FBI: Cybercriminals Eyeing Broadcast Disruption at Tokyo Olympics
Expected cyberattacks on Tokyo Olympics likely include attempts to hijack video feeds, the Feds warn.
Threatpost

