Copy
Join Security Ledger and Zilla Security Tuesday April 27th for a discussion of automating cloud user access reviews. RSVP here.

The Daily Ledger 09/16/2021 Edition:

More downtime on September 15th

By Charlie Demerjian on Sep 14, 2021 11:10 pm

SemiAccurate will be down for portions of September 15th to complete the site electrical upgrades begun two weeks ago. Sorry for the interruption, we will make this as brief as possible.
Read more


The post More downtime on September 15th appeared first on SemiAccurate.



Former US intelligence operatives charged with helping UAE hack rivals, Americans

By Tonya Riley on Sep 14, 2021 05:31 pm

The Justice Department charged three former U.S. intelligence operatives on Tuesday with hacking and conspiracy charges in connection with their work helping United Arab Emirates spy on activists and political rivals. The charges allege that defendants Marc Baier, Ryan Adams and Daniel Gericke “knowingly and willfully” provided the UAE with spy technology without approval from the U.S. government. The charges back up a 2019 Reuters investigation that found a secret hacking unit of UAE-based cybersecurity firm DarkMatter was hiring former U.S. intelligence officers to help the UAE to spy on the phones of activists, diplomats and other nation’s leaders. Former employees told Reuters that their work with the hacking unit, “Project Raven,” also involved spying on U.S. citizens and companies. The Intercept first reported the existence of DarkMatter in 2016. According to court documents, after leaving government employment, Baier, Adams and Gericker joined a firm prosecutors referred to as “Company […]

The post Former US intelligence operatives charged with helping UAE hack rivals, Americans appeared first on CyberScoop.



Adobe Snuffs Critical Bugs in Acrobat, Experience Manager

By Tom Spring on Sep 14, 2021 05:02 pm

Adobe releases security updates for 59 bugs affecting its core products, including Adobe Acrobat Reader, XMP Toolkit SDK and Photoshop.

Microsoft Patches Actively Exploited Windows Zero-Day Bug

By Lisa Vaas on Sep 14, 2021 04:29 pm

On Patch Tuesday, Microsoft fixed 66 CVEs, including an RCE bug in MSHTML under active attack as threat actors passed around guides for the drop-dead simple exploit.

2021’s Most Dangerous Software Weaknesses

By Saryu Nayyar on Sep 14, 2021 04:05 pm

Saryu Nayyar, CEO at Gurucul, peeks into Mitre's list of dangerous software bug types, highlighting that the oldies are still the goodies for attackers.

ZLoader’s Back, Abusing Google AdWords, Disabling Windows Defender

By Tara Seals on Sep 14, 2021 01:21 pm

The well-known banking trojan retools for stealth with a whole new attack routine, including using ads for Microsoft TeamViewer and Zoom to lure victims in.

Pair of Google Chrome Zero-Day Bugs Actively Exploited

By Tara Seals on Sep 14, 2021 11:03 am

The security vulnerabilities bring the web behemoth up to 10 browser zero-days found so far this year.

Unpatched Bugs Plague Databases; Your Data Is Probably Not Secure – Podcast

By Lisa Vaas on Sep 14, 2021 09:45 am

Imperva's Elad Erez discusses findings that 46 percent of on-prem databases are sitting ducks, unpatched and vulnerable to attack, each with an average of 26 flaws.

ATM skimmer sentenced to 4 years after bank cameras, license plate readers captured crime spree

By Jeff Stone on Sep 14, 2021 09:44 am

A U.S. judge sentenced a Romanian man who installed data-stealing devices on ATMs throughout New York City and New Jersey to more than four years in prison in what is only the latest example of scammers using crude technical methods to access victims’ bank accounts. District Judge Peter Sherian imposed the punishment Monday on Dorinel Trofin, a 47-year-old man who previously pleaded guilty to conspiracy to commit bank fraud. Bank surveillance cameras and police license plate readers placed Trofin and a partner at dozens of locations where ATM skimmers were found. As part of a fraud ring, Trofin and his associate, Ionut Parachiv, would install hidden card-reading machines on popular ATMs, copying customers’ information and then withdrawing cash from the same accounts later. The pair also installed pinhole cameras in the cash machines to capture customers’ personal identification numbers. The effort affected more than 1,000 people and involved more than […]

The post ATM skimmer sentenced to 4 years after bank cameras, license plate readers captured crime spree appeared first on CyberScoop.



Romance, BEC Scams Lands Soldier in Jail for 46 Months

By Becky Bracken on Sep 14, 2021 09:10 am

A former Army Reservist pleaded guilty to scamming the elderly with catfishing and stealing from veterans.

Recent Articles:

BlackMatter Ransomware Hits Japanese Tech Giant Olympus
Apple products vulnerable to FORCEDENTRY zero-day attack – patch now!
Apple Issues Emergency Fix for NSO Zero-Click Zero Day
Apple patches against alleged NSO Group zero-click exploit used on activists
Serious Security: How to make sure you don’t miss bug reports!
Share Share
Tweet Tweet
Forward Forward
Share Share
Copyright © 2021 Box Jump LLC/The Security ledger, All rights reserved.


Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list