---
title: Enterprise Technical Security That Matters - April 2, 2021
description: Check out the latest news on Cybersecurity and Risk Management
image: https://blog.omnistruct.com/hs-fs/hubfs/Newsletter/March%20Newsletter%20Graphic.png?upscale=true&width=1116&upscale=true&name=March%20Newsletter%20Graphic.png
---

<https://omnistruct.com/>![Omnistruct Logo1200px](https://blog.omnistruct.com/hs-fs/hubfs/Omnistruct%20Logo1200px.png?width=300&height=64&name=Omnistruct%20Logo1200px.png)<https://omnistruct.com/>

- [Omnistruct Home](https://omnistruct.com/)

- [Omnistruct Home](https://omnistruct.com/)

Search for:

[Home](https://omnistruct.com) / Enterprise Technical Security That Matters - April 2, 2021

# Enterprise Technical Security That Matters - April 2, 2021

Posted by [Omnistruct Marketing](https://blog.omnistruct.com/author/omnistruct-marketing) on Apr 4, 2021 1:45:26 PM

- [Tweet](https://twitter.com/share)

![March Newsletter Graphic](https://blog.omnistruct.com/hs-fs/hubfs/Newsletter/March%20Newsletter%20Graphic.png?upscale=true&width=1116&upscale=true&name=March%20Newsletter%20Graphic.png)

## <https://www.zdnet.com/article/python-programming-language-hurries-out-update-to-tackle-remote-code-vulnerability/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--yhAPBSpI7p4R9Q1gCRxKsiuZmRWJDd1abQ7OD408sGzleuffTfdY8dP3pRL3z17NUfw4Z>[Critical netmask networking bug impacts thousands of applications](https://www.bleepingcomputer.com/news/security/critical-netmask-networking-bug-impacts-thousands-of-applications/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=119293562&_hsenc=p2ANqtz-_ySQNNIMoZrFWxy1JyiBbcOy4_49d2tpg_On_Gnx5XCrfA3UoPP5pHVT8PWwC6PeHmh21DaM2UMyFxadd3VsNmBcGT7w)<https://cyware.com/news/lets-talk-about-nimzaloader-the-new-malware-in-town-f9f4b245?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF><https://www.bleepingcomputer.com/news/security/microsofts-azure-sdk-site-tricked-into-listing-fake-package/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9xxmqciUWFvCLB63GWtMD6ablK430g7jsyjjVU4rTYqgextd0i5QuLprq20M3Hle9b_bD0><https://www.theregister.com/2021/03/08/in_brief_security/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--ymc13Asc_oRHbDe8xCp4xyqhc6wvVoHtJub_RNasOuHL3f0u17OaJnqPqEKO7l5v0DNYj><https://www.zdnet.com/article/python-programming-language-hurries-out-update-to-tackle-remote-code-vulnerability/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--yhAPBSpI7p4R9Q1gCRxKsiuZmRWJDd1abQ7OD408sGzleuffTfdY8dP3pRL3z17NUfw4Z>

Popular npm library netmask has a critical networking vulnerability. Netmask is frequently used by hundreds of thousands of applications to parse IPv4 addresses and CIDR blocks or compare them. By Ax Sharma I March 28, 2021

 

## <https://blog.malwarebytes.com/android/2021/02/barcode-scanner-app-on-google-play-infects-10-million-users-with-one-update/?web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--rJWw_b34lrEG5he9eCleIixO3eCRRcw6wtEljaAw2WR41mJ8LIPk2Rs-jlr8ZBHsCZoFo><https://cyware.com/news/watch-out-for-watchdog-fb508eb1?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--yhAPBSpI7p4R9Q1gCRxKsiuZmRWJDd1abQ7OD408sGzleuffTfdY8dP3pRL3z17NUfw4Z><https://www.inforisktoday.com/ryuk-ransomware-updated-worm-like-capabilities-a-16080?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_eY1LDx_q-AjGF-79fGR1AjReQeMsSS_PxX3YwaTnxV-0c6-elwo7TooEuqYQ-VCL_fdkN><https://securityaffairs.co/wordpress/115403/hacking/unityminer-qnap-nas-devices.html?web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--ymc13Asc_oRHbDe8xCp4xyqhc6wvVoHtJub_RNasOuHL3f0u17OaJnqPqEKO7l5v0DNYj><https://www.zdnet.com/article/old-linux-storage-bugs-new-security-patches/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9xxmqciUWFvCLB63GWtMD6ablK430g7jsyjjVU4rTYqgextd0i5QuLprq20M3Hle9b_bD0><https://cyware.com/news/a-new-account-stealing-malware-targets-global-tech-giants-e2995d5a?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF>[Evil Corp is Now Using Hades Ransomware to Evade Sanctions](https://cyware.com/news/evil-corp-is-now-using-hades-ransomware-to-evade-sanctions-62c9499f?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=119293562&_hsenc=p2ANqtz-_ySQNNIMoZrFWxy1JyiBbcOy4_49d2tpg_On_Gnx5XCrfA3UoPP5pHVT8PWwC6PeHmh21DaM2UMyFxadd3VsNmBcGT7w)<https://cyware.com/news/a-new-account-stealing-malware-targets-global-tech-giants-e2995d5a?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF><https://securityboulevard.com/2020/10/what-tech-companies-need-to-know-about-the-safe-data-act/>

Cybercriminals often keep looking for technical innovation to bypass security barriers to reach their targets. However, the Evil Corp cybercrime group has been observed using tactical ways to bypass the sanctions put by federal agencies. Recently, the group started using different ransomware to evade sanctions imposed by the Office of Foreign Assets Control (OFAC). By Cyware Alerts I March 30, 2021

 

## <https://www.aarp.org/money/scams-fraud/info-2021/ftc-fraud-report-identity-theft-pandemic.html?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--rJWw_b34lrEG5he9eCleIixO3eCRRcw6wtEljaAw2WR41mJ8LIPk2Rs-jlr8ZBHsCZoFo><https://portswigger.net/daily-swig/duckduckgo-browser-extension-vulnerability-leaves-edge-users-open-to-potential-cyber-snooping?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9xxmqciUWFvCLB63GWtMD6ablK430g7jsyjjVU4rTYqgextd0i5QuLprq20M3Hle9b_bD0><https://thehackernews.com/2021/03/warning-new-android-zero-day.html?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF>[VMware fixes bug allowing attackers to steal admin credentials](https://www.bleepingcomputer.com/news/security/vmware-fixes-bug-allowing-attackers-to-steal-admin-credentials/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=119293562&_hsenc=p2ANqtz-_ySQNNIMoZrFWxy1JyiBbcOy4_49d2tpg_On_Gnx5XCrfA3UoPP5pHVT8PWwC6PeHmh21DaM2UMyFxadd3VsNmBcGT7w)<https://thehackernews.com/2021/03/warning-new-android-zero-day.html?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF><https://securityboulevard.com/2020/10/what-tech-companies-need-to-know-about-the-safe-data-act/>

VMware has published security updates to address a high severity vulnerability in vRealize Operations that could allow attackers to steal admin credentials after exploiting vulnerable servers. By Sergiu Gatlan I March 30, 2021

 

## <https://thehackernews.com/2021/03/warning-new-android-zero-day.html?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF><https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-now-targeted-by-black-kingdom-ransomware/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF>[Citrix Patches DoS Vulnerabilities in Hypervisor](https://www.securityweek.com/citrix-patches-dos-vulnerabilities-hypervisor?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=119293562&_hsenc=p2ANqtz-_ySQNNIMoZrFWxy1JyiBbcOy4_49d2tpg_On_Gnx5XCrfA3UoPP5pHVT8PWwC6PeHmh21DaM2UMyFxadd3VsNmBcGT7w)<https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-now-targeted-by-black-kingdom-ransomware/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF><https://securityboulevard.com/2020/10/what-tech-companies-need-to-know-about-the-safe-data-act/>

Vulnerabilities Citrix patched in Hypervisor this week could allow for code executed in a virtual machine to cause denial of service on the host. By Ionut Arghire I March 31, 2021

 

---

[![Get a Free Consultation Now!](https://no-cache.hubspot.com/cta/default/5223782/7a13ece4-0f5b-4385-b275-f4c9cf174a2f.png)](https://cta-redirect.hubspot.com/cta/redirect/5223782/7a13ece4-0f5b-4385-b275-f4c9cf174a2f)

| [**Manage Your Newsletter Subscription!**](https://email.omnistruct.com/hs/manage-preferences/unsubscribe-test?d=VmYj8q8B8Y8PVKgD3Q3_YlyBW2m3bL73_YlyBN1JxwY5GKd_PV20N651_S8-DW32h8-b1SMBrJDxCXk4nYxf1&v=3&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8JY2k8rYji8ybkKsRGLX3QruVH833SZb2sPEHg8QoplUyUIeSBucWWbZlr0oNi2swQqB_i) |
| --- |

 

| Sincerely, **Omnistruct Marketing** 866-683-8827 [www.omnistruct.com](https://omnistruct.com/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--bZS74_WZe1IDlpd0Z6DuKMLZcZmRMDuUWzB2uaX6wFusI-z5BS8N513GN3u_X92ecTCaX) --- Omnistruct, 2740 Fulton Avenue #101-02, Sacramento, CA 95821, USA, (866) 683-8827 [Unsubscribe                  ](https://email.omnistruct.com/business-information-security-news-october-9-2020#)[Manage preferences](https://email.omnistruct.com/business-information-security-news-october-9-2020#) |
| --- |

 Topics: [Omnistruct Newsletter](https://blog.omnistruct.com/tag/omnistruct-newsletter)

### Recent Posts

- [Cyber Security Programs](https://omnistruct.com/)
- [Why NIST CSF?](https://omnistruct.com/why-nist-csf/)
- [Pricing By Outcome](https://omnistruct.com/by-outcome/)
- [Pricing By Service](https://omnistruct.com/by-service/)
- [About](https://omnistruct.com/company/)
- [Contact](https://omnistruct.com/contact/)
- [Blog](https://omnistruct.com/blog/)
- [Partners](https://omnistruct.com/partners/)
- [News](https://omnistruct.com/news/)

![Omnistruct](https://blog.omnistruct.com/hubfs/Omnistruct_July2019%20/Images/Omnistruct1%20(1).png)

#### Get Social

<https://twitter.com/Omnistruct> <https://www.linkedin.com/company/omnistruct/>

Omnistruct Inc® - Copyright 2019 - Terms of Use - Privacy Policy