<img src="https://secure.ruth8badb.com/159098.png" alt="" style="display:none;">

IT Security Newsletter - 6/16/2021

SHARE

Top News

Millions of Connected Cameras Open to Eavesdropping

Millions of connected security and home cameras contain a critical software vulnerability that can allow remote attackers to tap into video feeds, according to a warning from the Cybersecurity and Infrastructure Security Agency (CISA). The bug has been introduced via a supply-chain component from ThroughTek that's used by several original equipment manufacturers (OEMs) of security cameras - along with makers of IoT devices like baby- and pet-monitoring cameras, and robotic and battery devices. READ MORE...

Hacking

How FireEye attributed the SolarWinds hacking campaign to Russian spies

Careful data collection, specific keyword searches and the type of breach were factors that FireEye used to determine that Kremlin-sponsored hackers were behind one of the largest cyber-espionage operations in recent years. The first revelations about what would come to be known as the SolarWinds campaign occurred in early December 2020, when FireEye announced that hackers had stolen its security testing tools. READ MORE...


Poland Target of 'Unprecedented' Cyber Attacks: Govt

Poland's parliament said it will hold a closed-door session Wednesday to discuss a wave of cyber attacks against the EU member that the government called "unprecedented". "We'll listen to explanations and information from the prime minister (Mateusz Morawiecki)," Deputy Speaker Malgorzata Kidawa-Blonska told reporters on Tuesday. Morawiecki, who had requested the session, plans to present secret documents concerning the "wide scale" of the attacks, according to government spokesman Piotr Muller. READ MORE...

Software Updates

Windows 10 KB5003698 update fixes VPN bug, blurry text issues

Microsoft has released the June release preview cumulative updates for all editions of Windows 10 and Windows Server versions 1809 and 1909, with fixes for issues causing VPNs to fail and blurry text on the News and Interests taskbar button. This update is part of Microsoft's June 2021 monthly "C" update, allowing users to preview forthcoming updates and fixes scheduled for the approaching July 2021 Patch Tuesday. READ MORE...

Malware

Malicious PDFs Flood the Web, Lead to Password-Snarfing

The pushers behind the SolarMarker backdoor malware are flooding the web with PDFs stuffed with keywords and links that redirect to the password-stealing, credential-snarfing malware. Microsoft Security Intelligence said in a Tweet on Friday that the SolarMarker (also known as Jupyter) makers are looking for new success by using an old technique: Search Engine Optimization (SEO) poisoning. READ MORE...

Exploits/Vulnerabilities

Vulnerabilities Allow Hackers to Disrupt, Hijack Schneider PowerLogic Devices

Vulnerabilities discovered in some older Schneider Electric PowerLogic products can allow hackers to remotely take control of devices or disrupt them. Schneider informed customers earlier this month that its PowerLogic EGX100 and EGX300 communication gateways are affected by six types of vulnerabilities that could be exploited to access devices, launch denial-of-service (DoS) attacks, and for remote code execution. READ MORE...


Peloton Bike+ Bug Gives Hackers Complete Control

The popular Peloton Bike+ and Peloton Tread exercise equipment contain a security vulnerability that could expose gym users to a wide variety of cyberattacks, from credential theft to surreptitious video recordings. According to research from McAfee's Advanced Threat Research (ATR) team, the bug (no CVE available) would allow a hacker to gain remote root access to the Peloton's "tablet." The tablet is the touch screen installed on the devices to deliver interactive and streaming content. READ MORE...

Science & Culture

A DNA-based storage system with files and metadata

DNA-based data storage appears to offer solutions to some of the problems created by humanity's ever-growing capacity to create data we want to hang on to. Compared to most other media, DNA offers phenomenal data densities. If stored in the right conditions, DNA doesn't require any energy to maintain the data for centuries. And due to DNA's centrality to biology, we're always likely to maintain the ability to read it. READ MORE...

On This Date

  • ...in 1858, Abraham Lincoln delivers his House Divided speech in Springfield, Illinois.
  • ...in 1884, Coney Island opens the "Switchback Railway", the first true roller coaster, designed by inventor LaMarcus Adna Thompson.
  • ...in 1911, IBM is founded as the Computing-Tabulating-Recording Company in Endicott, NY.
  • ...in 1916, President Woodrow Wilson signs a bill incorporating the Boy Scouts of America.