After hack, officials draw attention to supply chain threats
AP, Eric Tucker
“We must enhance the resilience, diversity, and security of our supply chains. The vitality of our nation depends on it.” Read More
Credential phishing on the rise with Office 365 a top target
BetaNews, Ian Barker
“New attack tactics include the use of data URLs/encoding to mask content, dynamic content generation, leveraging of local HTML/PDF decoy files, dynamic loading of brand logos.” Read More
Whistleblower: Ubiquiti Breach “Catastrophic”
KrebsOnSecurity, Brian Krebs
“In reality…the attackers had gained administrative access to Ubiquiti’s servers at Amazon’s cloud service, which secures the underlying server hardware and software but requires the cloud tenant (client) to secure access to any data stored there.” Read More
AP sources: SolarWinds hack got emails of top DHS officials
AP, Alan Suderman
“The SolarWinds hack was a victory for our foreign adversaries, and a failure for DHS. We are talking about DHS’s crown jewels.” Read More
Nine cyber attack has all the hallmarks of ransomware, without the ransom
The Sydney Morning Herald, Tim Biggs
“The attack hit Nine’s systems in Sydney early on Sunday morning, disrupting live television, as workers arriving and logging in found their machines unresponsive.” Read More