Portland IT & Cybersecurity Blog
New Service Offerings – Announced
I am pleased to announce that we have added two new service offerings to our CyberSecurity Platform Suite. We are now able to perform Dark Web Scanning on your behalf and provide you with a report for you, your auditing agencies, cyber insurance, etc.. We can provide real-time scanning of the DarkWeb, so you can…
Hackers leak full EA data after failed extortion attempt
Hackers have leaked an estimated 751GB of compressed EA data containing FIFA 21 source code on a dark web forum. Initially, they released a cache of 1.3GB of FIFA source code on July 14 as part of a demand for payment to stop them from releasing the rest, but after EA refused to play ball,…
MedNetwoRX – Ransomware
A reported ransomware attack on MedNetwoRX has impeded medical providers’ access to their Aprima electronic health record systems for more than two weeks. This hack impacts medical practices, clinics and hospitals of all sizes, from solo providers to conglomerates that rely on MedNetworx to host the Aprima electronic medical records system from vendor CompuGroup eMDs.…
Facebook Under Investigation For Massive Data Leak
The Irish Data Protection Commission has launched an investigation into the massive leak of Facebook user data online. It was recently revealed that the personal data of more than 530 million Facebook users had been posted in a low-level hacking forum, with users’ phone numbers being offered for sale. Facebook’s defence is that the data…
Capcom: Ransomware gang used old VPN device
Capcom has released a final update about the ransomware attack it suffered last year, detailing how the hackers gained access to the network, compromised devices, and stole personal information belonging to thousands of individuals. In early November 2020, Ragnar Locker ransomware hit the Japanese game developer and publisher, forcing Capcom to shut down portions of…
FBI hacks into hundreds of infected US servers
FBI hacks into hundreds of infected US servers (and disinfects them) Of course you do – it was the name behind a foursome of Exchange bugs that got patched in an emergency update early in March 2021. Even though there was just a week to go until March 2021’s Patch Tuesday, Microsoft decided to issue…
Apple Mail Security Vulnerability Allows Email Snooping
The researcher is offering details on CVE-2020-9922, which can be triggered just by sending a target an email with two .ZIP files attached. A zero-click security vulnerability in Apple’s macOS Mail would allow a cyberattacker to add or modify any arbitrary file inside Mail’s sandbox environment, leading to a range of attack types. According to…
Technology as a Utility
Technology is rapidly becoming a standard utility, much like the water and electricity that flows into our homes and businesses. You turn on the switch and you have electricity for a monthly fee that only fluctuates when add that new television or you ‘use’ more power. I.T. is becoming the same way, with the monthly…
Spotify Gets Hit Again
Protection against credential stuffing isn’t something that a company like Spotify should struggle with, and suffering two credential stuffing incidents in one quarter shows a sloppy attitude toward security. As many as 100,000 of the music streaming service’s customers could face account takeover. Spotify has returned for another appearance with a credential stuffing disaster eerily…