Sam Fay

Articles from Sam Fay

Cybersecurity Weekly: Kaseya flaw, PrintNightmare updates, cybersecurity culture study

July 13, 2021

Kaseya left their customer portal vulnerable to a 2015 flaw. Microsoft releases successful PrintNightmare security updates. An org’s reaction to social engineering is indicative of their cybersecurity culture. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Ransomware affiliates, Cisco ASA flaws, Dell vulnerabilities

June 29, 2021

Ransomware gangs are now creating websites to recruit affiliates. A Cisco ASA flaw is under attack after a PoC exploit was posted online. 30 million devices are at risk from Dell SupportAssist RCE vulnerabilities. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: CVS Health breach, Wegmans breach, VPN attacks surging

June 22, 2021

Over a billion CVS Health records were exposed online. Supermarket chain Wegmans discloses data breach. VPN attacks surged in the first quarter of this year. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Largest ever password dump, DoJ recovers ransom, Chrome bugs

June 14, 2021

The largest password collection ever was leaked online with 8.4 billion entries. The U.S. DoJ recovers more than half of the ransom paid by Colonial Pipeline. A Chrome browser bug is under active attack. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: DOJ prioritizes ransomware, CODESYS flaws, Realtek bugs

June 7, 2021

The U.S. gives ransomware hacks a similar priority as terrorism. Ten critical flaws were found in the CODESYS industrial automation software. Researchers warn of critical bugs affecting the Realtek Wi-Fi module. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Job offer ID theft, Bluetooth vulnerability, SolarWinds hackers target think tanks

June 1, 2021

How to tell a job offer from an ID theft trap. A Bluetooth vulnerability enables hackers to mimic genuine devices. SolarWinds hackers target think tanks with a new NativeZone backdoor. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: DarkSide quits, STRRAT attacks, Mercari data breach

May 24, 2021

The DarkSide ransomware gang quits after their servers and Bitcoin stash are seized. The STRRAT RAT is masquerading as ransomware. An e-commerce giant suffers a major data breach in the Codecov incident. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Favicon backdoor, triple extortion scheme, ransomware for sale

May 19, 2021

Magecart hackers hide a PHP-based backdoor in website favicons. Ransomware attackers are now demanding cash from the customers of victims. Ransomware is selling for $4,000 on the dark web. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Ryuk ransomware, U.S. pipeline outage, Chrome privacy update

May 11, 2021

A Ryuk ransomware attack was sprung by a frugal student. The U.S. declares a state of emergency after ransomware hits their largest fuel pipeline. Google Chrome's new privacy feature restricts online user tracking. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: SonicWall zero-day, Experian leak, Python vulnerability

May 4, 2021

Hackers exploit a SonicWall zero-day bug in ransomware attacks. An Experian API exposed the credit scores of most Americans. Python was impacted by a critical IP address validation vulnerability. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: Geico data breach, SonicWall under attack, Twitter email

April 27, 2021

A Geico data breach exposed customers' driver's license numbers. Zero-day flaws in the SonicWall email security tool are under attack. Twitter accidentally sends suspicious emails asking to confirm accounts. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More

Cybersecurity Weekly: One-click hack, Discord Nitro ransomware, Codecov hacked

April 20, 2021

A one-click hack was found in popular desktop apps. Discord Nitro gift codes are now demanded as ransomware payments. The Codecov code coverage tool was hacked to steal dev credentials. All this, and more, in this week’s edition of Cybersecurity Weekly.

Learn More