December 21, 2020 at 10:38PM

■■□□□ While analyzing artifacts from the SolarWinds Orion supply-chain attack, security researchers discovered another backdoor that is likely from a second threat actor. Some SolarWinds systems were found compromised with malware named Supernova and CosmicGale, unrelated to the recent supply chain attack. https://www.bleepingcomputer.com/news/security/new-supernova-backdoor-found-in-solarwinds-cyberattack-analysis/ https://t.me/cKure/6445

December 21, 2020 at 02:24PM

■■□□□ US Indicts Former Zoom China Liaison for Doing PRC’s Bidding A former China liaison at Zoom has been indicted by the US for interfering in meetings, monitoring users and fabricating evidence against them as per Beijing’s instructions. https://www.infosecurity-magazine.com:443/news/us-indicts-former-zoom-china/ | #UnitedStates #China https://t.me/cKure/6443

December 21, 2020 at 01:46PM

■■■■□ #CyberWar via #Zeroday: Zero-click iOS zero-day found deployed against #Qatar based Al Jazeera employees / journalists. The spyware was created by #Israel based NSO-Group and supplied to various nation states customers. https://www.zdnet.com/article/zero-click-ios-zero-day-found-deployed-against-al-jazeera-employees/ | #0day https://t.me/cKure/6442

December 21, 2020 at 01:29PM

■■□□□ #DataLeak: Flavor and fragrance producer Symrise is the last victim of the Clop ransomware team that claims to have stolen 500 GB of unencrypted files. https://securityaffairs.co/wordpress/112494/malware/clop-ransomware-symrise.html https://t.me/cKure/6441

December 21, 2020 at 09:51AM

■□□□□ Cybereason and Oracle Team Up for Security at Scale from the Endpoint to the Cloud. https://securityboulevard.com/2020/12/cybereason-and-oracle-team-up-for-security-at-scale-from-the-endpoint-to-the-cloud/ https://t.me/cKure/6438