Chinese APT exploits critical CVE in Pulse Secure VPN

Users of Pulse Secure VPN are being urged to patch a newly disclosed authentication bypass zero-day that enables an unauthenticated user to perform remote arbitrary file execution on the... Read more »

Security Think Tank: ‘Legitimate interest’ crucial for vaccine passports

There are now discernible paths out of the current Covid-related lockdowns. One such path is the use of so-called vaccine passports, but what form would they take and, if... Read more »

Codecov supply chain attack has echoes of SolarWinds

Some of the largest technology companies in the world are investigating possible compromises of their systems as the impact of a SolarWinds-style cyber attack on Codecov, a supplier of... Read more »

YouGov incentivises sharing of personally identifiable information

Earlier this month, international research and data analytics group YouGov Safe introduced a product it hopes can enable people who sign up to monetise their personal data. YouGov Safe... Read more »

Government puts Facebook under pressure to stop end-to-end encryption over child abuse risks

The Home Secretary Priti Patel will use a conference organised by the NSPCC today to warn that end-to-end encryption will severely erode the ability of tech companies to police... Read more »

The Secret IR Insider’s Diary – from Sunburst to DarkSide

It’s been an unusual few weeks. Since the massive Sunburst supply chain compromise attacks which exploited a backdoor in organisations’ SolarWinds Orion network management software, my team’s day-to-day activities... Read more »

Finnish government strengthens country’s IT network security

Finland has established a national organisation to appraise domestic communications network security concerns and evaluate vulnerabilities to attacks from the cyber domain. The Network Security Advisory Board (NSAB) will engage with... Read more »

Dutch accuse UK of ‘damaging confidence’ by disclosing details of EncroChat police collaboration

Prosecutors in Rotterdam have accused the UK of “damaging confidence” of European law enforcement bodies by disclosing details of a joint police operation to infiltrate the EncroChat encrypted phone... Read more »

Biden sanctions Russia over SolarWinds cyber attacks

As has long been anticipated, US president Joe Biden has today (15 April) signed an executive order imposing fresh sanctions on Russia over a pattern of malicious cyber attacks... Read more »

University of Hertfordshire is latest academic cyber attack victim

The University of Hertfordshire has become the latest victim of a spate of cyber attacks against academic institutions after a major incident knocked all its systems offline. The attack... Read more »
Subscribe to our Newsletter