Scripps Health, a hospital network based in San Diego, was hit by a cyberattack over the weekend, forcing some critical-care patients to be diverted, according to the San Diego Union-Tribune. Scripps acknowledged the attack in a statement but didn't specify whether it was a ransomware incident. It's also unknown whether the adversaries compromised any patient records or other sensitive data. READ MORE...
Microsoft quietly revealed its plans to remove the Adobe Flash plugin from Windows 10, with mandatory removal starting in July 2021. On January 1st, 2021, Adobe Flash officially reached the end of life (EoL) after being considered a significant security risk while browsing the web due to its exploitation by threat actors. As part of the end of life, Adobe announced that they would stop distributing Flash Player, and browser developers would no longer support Flash plugins. READ MORE...
Pulse Secure has fixed a zero-day vulnerability in the Pulse Connect Secure (PCS) SSL VPN appliance that is being actively exploited to compromise the internal networks of defense firms and govt agencies. Last week, cybersecurity firm FireEye revealed that threat actors actively exploited the zero-day vulnerability, tracked as CVE-2021-22893, to deploy malware on Pulse Secure devices to steal credentials and provide backdoor access to compromised networks. READ MORE...
A week after Apple issued its biggest iOS and iPadOS update since last September's release of version 14.0, the company has released a new update to patch two zero-days that allowed attackers to execute malicious code on fully up-to-date devices. Monday's release of version 14.5.1 also fixes problems with a bug in the newly released App Tracking Transparency feature rolled out in the previous version. READ MORE...
Cybercriminals are increasingly targeting third-party infrastructure that restaurants across the U.S. use to place online orders, private investigators have found. The last six months have seen hacks of five online ordering platforms, exposing some 343,000 payment cards, threat intelligence firm Gemini Advisory said on April 29. Hundreds of restaurants use the platforms, and crooks seem to know it. READ MORE...
A variant of the Buer malware, which is being distributed in emails disguised as DHL support shipping notices, comes with a fresh code rewrite in the popular Rust language and looks like it may be in the process of prepping for rental to other cybercrooks. Using the increasingly popular, efficient and easy-to-use Rust programming language will help the malware to slip past detection, Proofpoint researchers said in a post on Monday morning. READ MORE...
A Northeastern University research team finds code defects -- and some vulnerabilities -- by detecting when programmers used different code snippets to perform the same functions. Repeatable, consistent programming is considered a best practice in software development, and it becomes increasingly important as the size of a development team grows. Now, research from Northeastern University shows that detecting inconsistent programming can also be used to find bugs and vulnerabilities. READ MORE...
Technical documentation and proof-of-concept exploit (PoC) code is available for a high-severity vulnerability in Microsoft Exchange Server that could let remote attackers execute code on unpatched machines. The flaw is for one of the four that the National Security Agency (NSA) reported to Microsoft and received a fix in April. Despite being the least severe of the bunch and requiring authentication, the risk that CVE-2021-28482 poses to companies is not to be neglected. READ MORE...
The Food and Drug Administration is planning to authorize the use of Pfizer-BioNTech's COVID-19 vaccine in adolescents 12 to 15 years old later this week or early next week, according to a report by The New York Times. If the FDA does authorize use of the vaccine in the teen group in the week, the Centers for Disease Control and Prevention's vaccine advisory panel will likely meet a day later to review the clinical trial data and make a recommendation on use, the Times reported. READ MORE...