Published in Polyverse Corporation·Sep 25, 2019Polyverse Blog UpdateThanks for reading the Polyverse blog. We are now moving off Medium and on to our own website. You can find our new home at polyverse.com/blog. Please follow us there to keep up with everything cybersecurity. We are transitioning all existing content, so it will show up on the new site too. Happy reading!Blog1 min readBlog1 min read
Published in Polyverse Corporation·Sep 23, 2019Polyverse Weekly Breach ReportA snapshot of last week’s reported cybersecurity breaches and vulnerabilities iOS 13 Apple’s iOS 13 contains a vulnerability that could enable anyone to bypass lock-screen protections on iPhones. The vulnerability had not been fixed in advance of releasing the software on September 19. To read more: https://thehackernews.com/2019/09/ios-13-lockscreen-bypass.html Ecuador vpnMentor discovered a flaw in a server that exposed the personal data…Security5 min readSecurity5 min read
Published in Polyverse Corporation·Sep 16, 2019Polyverse Weekly Breach ReportA snapshot of last week’s reported cybersecurity breaches and vulnerabilities Win32/Stealth Falcon Researchers discovered a new cyberattack associated with the Stealth Falcon cyber-espionage group. Dubbed Win32/StealthFalcon, the malware exploits Windows Background Intelligent Transfer Service to communicate with and send data to a remote command-and-control server. To read more: https://thehackernews.com/2019/09/stealthfalcon-virus-windows-bits.htmlCybersecurity4 min readCybersecurity4 min read
Published in Polyverse Corporation·Sep 9, 2019Polyverse Weekly Breach ReportA snapshot of last week’s reported cybersecurity breaches and vulnerabilities Supermicro servers Vulnerabilities exist in the baseboard management controller of Supermicro enterprise servers. Dubbed USBAnywhere, the flaw could allow someone to launch a USB attack without physically accessing a vulnerable server. To read more: https://thehackernews.com/2019/09/hacking-bmc-server.html Metasploit moduleCybersecurity4 min readCybersecurity4 min read
Published in Polyverse Corporation·Sep 3, 2019Polyverse Weekly Breach ReportA snapshot of last week’s reported cybersecurity breaches and vulnerabilities Hostinger Web-hosting provider Hostinger suffered a data breach after attackers found an authorization token on one of the company’s servers, and used it to gain access to an internal system API. Hostinger ring-fenced the vulnerable system and reset 14m customer passwords. To read more: https://thehackernews.com/2019/08/web-hosting-hostinger-breach.htmlSecurity3 min readSecurity3 min read
Published in Polyverse Corporation·Aug 26, 2019Polyverse Weekly Breach ReportA snapshot of last week’s reported cybersecurity breaches and vulnerabilities [24]7.ai Delta Air Lines is suing chatbot company [24]7.ai over a breach of passenger data. A hacker broke into delta.com through [24]7.ai’s systems and stole 825,000 customers’ records. Delta is hoping to recover the costs incurred dealing with the breach, which it says amount to millions of dollars. …Cybersecurity4 min readCybersecurity4 min read
Published in Polyverse Corporation·Aug 19, 2019Polyverse Weekly Breach ReportA snapshot of last week’s reported cybersecurity breaches and vulnerabilities Elastic Block Storage Snapshots Cloud administrators are misconfiguring settings on Amazon’s Elastic Block Storage Snapshots, leaving them public and unencrypted even when the content — such as application keys or sensitive data — should be private. Consequently, companies are unintentionally leaking files, as anyone can download an exposed hard disk…Cybersecurity5 min readCybersecurity5 min read
Published in Polyverse Corporation·Aug 12, 2019Polyverse Weekly Breach ReportA snapshot of last week’s reported cybersecurity breaches and vulnerabilities SWAPGSAttack Researchers discovered a vulnerability that impacts every Windows computer using an Intel processor made since 2012. Building on previous work on CPU vulnerabilities including Spectre and Meltdown, the researchers identified a side-channel attack that exploits the privileged instruction SWAPGS. Dubbed SWAPGSAttack, the vulnerability bypasses protections implemented to defend against…Cybersecurity5 min readCybersecurity5 min read
Published in Polyverse Corporation·Aug 5, 2019Polyverse Weekly Breach ReportA snapshot of last week’s reported cybersecurity breaches and vulnerabilities Immunity Longtime US-government contractor Immunity developed an exploit for the Windows vulnerability known as BlueKeep, and included it in its penetration-testing toolkit, which is available by subscription. Some security researchers have questioned Immunity’s decision to publish the code, arguing that this may benefit bad actors. Immunity maintains that it made…Cybersecurity4 min readCybersecurity4 min read
Published in Polyverse Corporation·Jul 29, 2019Polyverse Weekly Breach ReportA snapshot of last week’s reported cybersecurity breaches and vulnerabilities Ellucian systems Hackers exploited a security flaw in the Banner platform, which is made by the software company Ellucian and used by universities to manage student and administrative data. The attack compromised information systems at 62 universities, generating fake data and potentially accessing sensitive information. To read more: https://edscoop.com/ellucian-banner-cyberattacks-62-universities/Security5 min readSecurity5 min read
