IT Security Newsletter - 6/10/2021
Mystery malware steals 26M passwords from 3M PCs. Are you affected?
Researchers have discovered yet another massive trove of sensitive data, a dizzying 1.2TB database containing login credentials, browser cookies, autofill data, and payment information extracted by malware that has yet to be identified. In all, researchers from NordLocker said on Wednesday, the database contained 26 million login credentials, 1.1 million unique email addresses, more than 2 billion browser cookies, and 6.6 million files. READ MORE...
JBS Paid $11M to REvil Gang Even After Restoring Operations
JBS Foods paid the equivalent of $11 million in ransom after a cyber-attack that forced the company to shut down some operations in the United States and Australia over the Memorial Day weekend. The company made the payment to cybercriminals to ensure the protection of its data and mitigate any further damage to its customers, as it was paid even after the world's largest meat distributor had managed to return most of the facilities affected back to full operational capacity. READ MORE...
Google fixes sixth Chrome zero-day exploited in the wild this year
Google has released Chrome 91.0.4472.101 for Windows, Mac, and Linux to fix 14 security vulnerabilities, with one zero-day vulnerability exploited in the wild and tracked as CVE-2021-30551. Google Chrome 91.0.4472.101 has started rolling out worldwide and will become available to all users over the next few days. Google Chrome will automatically attempt to upgrade the browser the next time you launch the program, but you can also perform a manual update. READ MORE...
Intel Plugs 29 Holes in CPUs, Bluetooth, Security
Intel has unleashed 29 security advisories to plug up some serious bugs in the BIOS firmware for Intel processors, as well as in its Bluetooth products, Active Management Technology tools, the NUC Mini PC line, and, ironically, in its own security library. Details about the advisories can be found at Intel's Product Security Center. Intel's senior director of communications, Jerry Bryant, said in a blog post on Wednesday that Intel's mostly digging these security issues up internally. READ MORE...
Amazon Sidewalk Mesh Network Raises Security, Privacy Concerns
Amazon this week activated its proprietary mesh network known as Sidewalk, linking tens of millions of Amazon smart devices, each sharing a tiny sliver of their bandwidth to provide a wide network of connectivity even when and where WiFi service is poor or unavailable. Like all new technologies, it is being promoted with attractive use cases - such as the ability to determine that a pet has gone walkabout and detect that pet's current whereabouts. READ MORE...
How could the FBI recover BTC from Colonial's ransomware payment?
The cybersecurity buzz of the week is the intriguing - and highly unusual - aftermath of the Colonial Pipeline ransomware attack. Colonial runs the largest American supply pipeline for refined petroleum products, capable of shifting about 500 million litres a day of various fuels, including gasoline (petrol), jet fuel, diesel and heating oil, between Texas and the North Eastern US. READ MORE...
Intel Releases 29 Advisories to Describe 73 Vulnerabilities Affecting Its Products
Intel this week announced the availability of patches for 73 vulnerabilities identified across multiple products, including several high-severity flaws that can be exploited to escalate privileges. According to Intel, more than half of the bugs were discovered internally and 40% were reported through its bug bounty program. The newly addressed issues represent more than half of the 132 potential vulnerabilities the company patched since the beginning of 2021. READ MORE...
Quantum communications reaching record distances
The Cambridge Research Laboratory of Toshiba Europe announced a demonstration of quantum communications over optical fibres exceeding 600 km in length. The breakthrough will enable long distance quantum-secured information transfer between metropolitan areas and is a major advance towards building the future quantum internet. The term quantum internet describes a global network of quantum computers connected by long distance quantum communication links. READ MORE...
- ...in 1776, The Continental Congress appoints a committee to write a Declaration of Independence.
- ...in 1920, The Republican Party convention in Chicago endorses women's suffrage.
- ...in 1940, Italy declares war on France and Great Britain.
- ...in 1944, Cincinnati Reds pitcher Joe Nuxhall makes his major league baseball debut and becomes the youngest player in history at the age of 15.