Cybercriminals Have a Heyday with WinRAR Bug in Fresh Campaigns
With new attacks on the Israeli military and social-work educators, exploitation of the 19-year-old flaw shows no signs of slowing down.
Tara Seals
About
Tara Seals has nearly 25 years of experience as a journalist, analyst and editor in the communications and technology space. Prior to Threatpost, Tara was the North American news lead for Infosecurity Magazine, and spent 13 years working for Informa (formerly Virgo Publishing), as executive editor and editor-in-chief at publications focused on both the service provider and the enterprise arenas. A Texas native, she holds a B.A. from Columbia University, lives in Western Massachusetts with her family and is on a never-ending quest for good Mexican food in the Northeast.
ThreatList: Remote Workers Threaten 1 in 3 Organizations
More than one-third of surveyed organizations (36 percent) said they have experienced a security incident because of a remote worker’s actions.
Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks
Attackers can remotely compromise multiple network devices (IP PBX, conferencing gear and IP phones), installing malware and eavesdropping via video and audio functions.
The attack appears to be associated with a China-backed APT actor.
The contractor with whom it shared the data has a vulnerable, unpatched network.
Users of the open-source project should upgrade immediately.
Researchers said 1 million user sessions could have been exposed to the campaign, which downloads the Shlayer trojan.
Experts from Gartner, Lookout and Google talk enterprise mobile security in this webinar replay.
Until a report this week, Uber’s Surfcam’s use was thought to be limited to incidents uncovered in Singapore in 2017. For its part, Uber denies that it’s a “spyware.”
