---
title: Enterprise Technical Security That Matters - April 23, 2021
description: Check out the latest news on Cybersecurity and Risk Management
---

[Omnistruct Newsletters](https://blog.omnistruct.com)

# [Enterprise Technical Security That Matters - April 23, 2021](https://blog.omnistruct.com/enterprise-technical-security-that-matters-april-23-2021)

 Written by [Omnistruct Marketing](https://blog.omnistruct.com/author/omnistruct-marketing) | Apr 23, 2021 7:14:21 PM

## <https://www.zdnet.com/article/python-programming-language-hurries-out-update-to-tackle-remote-code-vulnerability/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--yhAPBSpI7p4R9Q1gCRxKsiuZmRWJDd1abQ7OD408sGzleuffTfdY8dP3pRL3z17NUfw4Z><https://www.bleepingcomputer.com/news/security/critical-netmask-networking-bug-impacts-thousands-of-applications/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=119293562&_hsenc=p2ANqtz-_ySQNNIMoZrFWxy1JyiBbcOy4_49d2tpg_On_Gnx5XCrfA3UoPP5pHVT8PWwC6PeHmh21DaM2UMyFxadd3VsNmBcGT7w><https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN8064453p_b1V1-WJV7CgzT5W7St1TR69KdD9W8lWClJ5HHh2PV1yxtF1HJCkWW42vcf167NqWTN9ky8Z6LMh7RN7xTxzyMySGfW8mwqTT7XymSrVqL2P75p5vHQW2zJ-BD5x859GW43tFjr4CWC3mN2RlX3HXHYQJN6pfksbPWR3QW4blhVH3qBDt8W5DVSls3Wgvz-W4cdw9f35_hM0W8Lxv3N635Vd0W3HcYKQ5FtQvMW5DLsm82hqtG1W8m4Dqv6RmwKFW8nNRXd74x5GGW97KkD38DDlLZW6QVnNZ6ctNjQW8tynK13-ZXYWW66J7C937f7x7W6NPPkF2X4nw9W1Q6gLZ6zG2FsW3tf3D-14ZW7vW9j9slP8Sb04gW8q0jd28GJSW3N6KRB2fbfjMs31TR1>[Saint Bot Downloader - A New Cyberthreat in Making](https://email.omnistruct.com/e2t/tc/VX09bl5MLlmYW2Y_Brv1fTjB2VVm64t4qL-CmN2glj213p_b1V1-WJV7CgHBHN4hvnx3dfQ4LW1PxKH518ltk5W30cYcg4P5MNzW2R94r_5T2CFCW2xV5WR6Kmmv5F4ZSFYR55PBW3gdHXc5JhCtWW6q_f4q5qZLhvW4dgKXv38jZmDW377k4Q7vG7PhW6Hy3l74MkJhSW6zrHbK5NrkpQW3Rhmzb8jtlPdW3ywX2F8G6pSMVb-4h77z0Xd8W4_79dK3vgJSRW40LC-W7gDffdW2YxD981fWCpfW1xtHF-7FTNcVW8Jl1hP3hmNJ9W8YqW9W6CQJ5cW4cB9dc3nxxYlW3hq6jB1sn9nkW1_S2wQ96Tz9KW8DLgsJ5FXjtqN3_6SFTS33VyW1QWlTv2ZlCsWW4s6MCd275rBtW7QjhYn7sXgvzN7WQkwXH3q3Y34-Q1)<https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN8064453p_b1V1-WJV7CgzT5W7St1TR69KdD9W8lWClJ5HHh2PV1yxtF1HJCkWW42vcf167NqWTN9ky8Z6LMh7RN7xTxzyMySGfW8mwqTT7XymSrVqL2P75p5vHQW2zJ-BD5x859GW43tFjr4CWC3mN2RlX3HXHYQJN6pfksbPWR3QW4blhVH3qBDt8W5DVSls3Wgvz-W4cdw9f35_hM0W8Lxv3N635Vd0W3HcYKQ5FtQvMW5DLsm82hqtG1W8m4Dqv6RmwKFW8nNRXd74x5GGW97KkD38DDlLZW6QVnNZ6ctNjQW8tynK13-ZXYWW66J7C937f7x7W6NPPkF2X4nw9W1Q6gLZ6zG2FsW3tf3D-14ZW7vW9j9slP8Sb04gW8q0jd28GJSW3N6KRB2fbfjMs31TR1><https://www.zdnet.com/article/python-programming-language-hurries-out-update-to-tackle-remote-code-vulnerability/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--yhAPBSpI7p4R9Q1gCRxKsiuZmRWJDd1abQ7OD408sGzleuffTfdY8dP3pRL3z17NUfw4Z>

With the rapid technological advancement in the cybercrime realm, attackers are coming up with new ways of quickly developing and deploying sophisticated malware. Recently, security researchers identified a new malware dubbed Saint Bot that has made a name for itself in a short time. By Cyware Alerts I April 19, 2021

 

## <https://blog.malwarebytes.com/android/2021/02/barcode-scanner-app-on-google-play-infects-10-million-users-with-one-update/?web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--rJWw_b34lrEG5he9eCleIixO3eCRRcw6wtEljaAw2WR41mJ8LIPk2Rs-jlr8ZBHsCZoFo><https://cyware.com/news/watch-out-for-watchdog-fb508eb1?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--yhAPBSpI7p4R9Q1gCRxKsiuZmRWJDd1abQ7OD408sGzleuffTfdY8dP3pRL3z17NUfw4Z><https://www.inforisktoday.com/ryuk-ransomware-updated-worm-like-capabilities-a-16080?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_eY1LDx_q-AjGF-79fGR1AjReQeMsSS_PxX3YwaTnxV-0c6-elwo7TooEuqYQ-VCL_fdkN><https://securityaffairs.co/wordpress/115403/hacking/unityminer-qnap-nas-devices.html?web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--ymc13Asc_oRHbDe8xCp4xyqhc6wvVoHtJub_RNasOuHL3f0u17OaJnqPqEKO7l5v0DNYj><https://www.zdnet.com/article/old-linux-storage-bugs-new-security-patches/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9xxmqciUWFvCLB63GWtMD6ablK430g7jsyjjVU4rTYqgextd0i5QuLprq20M3Hle9b_bD0><https://cyware.com/news/a-new-account-stealing-malware-targets-global-tech-giants-e2995d5a?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF><https://cyware.com/news/evil-corp-is-now-using-hades-ransomware-to-evade-sanctions-62c9499f?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=119293562&_hsenc=p2ANqtz-_ySQNNIMoZrFWxy1JyiBbcOy4_49d2tpg_On_Gnx5XCrfA3UoPP5pHVT8PWwC6PeHmh21DaM2UMyFxadd3VsNmBcGT7w><https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN80643Q3p_9LV1-WJV7CgZ5sW2tgfkB1WwCrXW5p9B5s4T3n8tW44Qk7w4399JVW3mTDSk6L1w63W6X2zr21RTQkTW7SLy6N2CjrxzN3N3D9zS_PhcW7z2sQ55zDsQtW7Y4Wkc37_02sN85FvS1PmCmkW8SNmSL8BlrxmW56s5822hwLqSW1f2w2V2s8kN_W7QBzZ35kb0WxW87MfB31ThB4qV-fdwH7Y9_b4M_Bn6JkgWyvW4Q-3Gj6hvTzFN18WJ5wCFMNcVQT2pv92_xgyW4KPHxb4--vl7M7nDTf-kSjRW2PR6vr4TKlJXN8wzPkKn_-4SW4C4hby2_hQCWW7FYf_h79-VBSW1NrmFZ54mMK-W71L9Q51VyfGZ3dzt1>[Iron Tiger APT Group Roars Louder With New Toolkit](https://email.omnistruct.com/e2t/tc/VX09bl5MLlmYW2Y_Brv1fTjB2VVm64t4qL-CmN2glh_Z5nxG7V3Zsc37CgVjvW8Sx5Xn4KYpnQW2rhrNg68HsmWW7crP_p8gG9ppVx-hwf97tb4qW1PBXNV70jTmWW2Rv6Xk3gW67dW83fkvj8J_XvNW2R5hh37FqlrlW5bmtX_8l6JJ3W5SFCQF1rxd_QW7sBV8V6T0T2kW2B6tbj547Mn9F415TK9-M4GW58n-9N2hndGyW73dfRf2sJM84N86QvDv678LLW7PYFYJ2L6czhW57r28Z10BxywW8C6QXg5XqNMTW4GYMsd7ZRZy6W68H2vT85hSp1V2sz3P6VMkrFW3gnhkN3gw61rW4V7dvN9fCzWjW8b-sxX6yJJT2W3jdW9G5bZxKvVGpn3y32hyssW4t2mFg6cTg37W2qk5jD8KYcrGW8nrPjB6JXLVvW3KxQH68jKkCDN7sCB767Mw0x3dfg1)<https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN80643Q3p_9LV1-WJV7CgZ5sW2tgfkB1WwCrXW5p9B5s4T3n8tW44Qk7w4399JVW3mTDSk6L1w63W6X2zr21RTQkTW7SLy6N2CjrxzN3N3D9zS_PhcW7z2sQ55zDsQtW7Y4Wkc37_02sN85FvS1PmCmkW8SNmSL8BlrxmW56s5822hwLqSW1f2w2V2s8kN_W7QBzZ35kb0WxW87MfB31ThB4qV-fdwH7Y9_b4M_Bn6JkgWyvW4Q-3Gj6hvTzFN18WJ5wCFMNcVQT2pv92_xgyW4KPHxb4--vl7M7nDTf-kSjRW2PR6vr4TKlJXN8wzPkKn_-4SW4C4hby2_hQCWW7FYf_h79-VBSW1NrmFZ54mMK-W71L9Q51VyfGZ3dzt1><https://securityboulevard.com/2020/10/what-tech-companies-need-to-know-about-the-safe-data-act/>

Iron Tiger, a threat actor group, has upgraded its toolkit with an updated SysUpdate malware variant. Recently, research from Trend Micro shed light on one of the group’s tools that hides files at the kernel level. This new malware variant is now using more files in its infection routine, with some updated tactics. By Cyware Alerts I April 20, 2021

 

## <https://www.aarp.org/money/scams-fraud/info-2021/ftc-fraud-report-identity-theft-pandemic.html?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--rJWw_b34lrEG5he9eCleIixO3eCRRcw6wtEljaAw2WR41mJ8LIPk2Rs-jlr8ZBHsCZoFo>[Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock](https://email.omnistruct.com/e2t/tc/VX09bl5MLlmYW2Y_Brv1fTjB2VVm64t4qL-CmN2glj213p_b1V1-WJV7CgTjtVk_-P86VP65FW1cl3B48BtGFMW1gsSNV6PGFt-W5T70P-8PM905W4QvZcg3dlCfGW7KnKw43zSZ1gW4DvHqt1cJ0csW5FQLLX3c-TdQW8S_9jr8NZ3yqVQs1yS6tKwrgW3cVRct6_gBrRW8cqxvB2Mvy_8VYhMpm7J7x4XW3pZtHt4z8pYhW3wm5Kw5scfjkW5Z2fPG26CCmzW7j2Hqw2CQ90yV2rbS51TGGXVVtnKRr2tNHmCW9fvq5V2ytvs2W3nDXH91yBYN_N47YGcNwd3W_W3Nt8WZ1dlrwrW5sJXCy7h55NfW6VtgFH3hdMPrW6Rwjm472pT-6W2s0b0s1vW_JfW2KlFQ_49JrwdVrTXxH6zSYpdW3JtBjb5H2LKS3dLS1)<https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN80642X5nxH1V3Zsc37CgVRjW2nvDYh43-yStVWDCzZ60v-BYW3_HSfk8llWKWW2fwXqp50gSZVW8hktxk6741S8W6FN5Z28j_fhRW5DFd-v11h8WNW56qZN390FkqvN4JctZWcXKdCW7XNtnr8cCsdLW36vF4T90FwFtW4ZgjH-1pvKywW3ZPDfQ95-BqlW5837WK2vlZqKW6HkMYX81D2Y_W50hx226GNZnqVC3PnH7cRg1wN2Zj--LCW-zCW3_MjWl1PHMzcW8NlBgR6xLgY2W6pP4bH4cDY17N24HX7FQwN-CW8pV2ST1T31DbW5G-nGP4bmJxrW2j8WZr8sVpzcW1KfS6p4S68fLN2JwdQjjfRGLN6pslVc_98vDW4L_36c4p4qh0W3r_5t42F6m6BW7JHCNR24K8NKV3tw5n1hWWYCW4w3f7r5Trn1zW3Z-6245171HzN3fw3BwxSDbcW7sslT31d-j-BW2R5SFz6xDJKxW1wHjVN7mTdzc3jbn1><https://www.bleepingcomputer.com/news/security/vmware-fixes-bug-allowing-attackers-to-steal-admin-credentials/?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=119293562&_hsenc=p2ANqtz-_ySQNNIMoZrFWxy1JyiBbcOy4_49d2tpg_On_Gnx5XCrfA3UoPP5pHVT8PWwC6PeHmh21DaM2UMyFxadd3VsNmBcGT7w><https://securityboulevard.com/2020/10/what-tech-companies-need-to-know-about-the-safe-data-act/>

The Mozilla Foundation fixed a flaw in its Firefox browser that allowed spoofing of the HTTPS secure communications icon, displayed as a padlock in the browser address window. Successful exploitation of the flaw could have allowed a rogue website to intercept browser communications. By Tom Spring I April 20, 2021

 

## <https://thehackernews.com/2021/03/warning-new-android-zero-day.html?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF><https://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-now-targeted-by-black-kingdom-ransomware/?utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9hTkwdvupqkH0s00ySnONWnAMswUHpQhRZ9j1tWUKidIM49A-CV_kTkgDg9Q80Xiq9fruF><https://www.securityweek.com/citrix-patches-dos-vulnerabilities-hypervisor?&web_view=true&utm_campaign=Cybersecurity%20News%20that%20Matters&utm_source=hs_email&utm_medium=email&utm_content=119293562&_hsenc=p2ANqtz-_ySQNNIMoZrFWxy1JyiBbcOy4_49d2tpg_On_Gnx5XCrfA3UoPP5pHVT8PWwC6PeHmh21DaM2UMyFxadd3VsNmBcGT7w><https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN8064453p_b1V1-WJV7CgGgCW6r1n6g4HKmNfV2Q7LS7wMdKwW7LVXR_8dDx3LVcDV8P8GWBSsW1BkxcD7b6m8NW4s6z0B8qqPHBW3y8HHj329BtCW7dFZYY1Sr760W3zSPZc30BWm9W2-T_bS1MW0F0W7G5ppX2q8RCGN7nFkgsSGlGZW27nDgw7HLS77W4S-PFW2btLwHW3fmtF46DLxHpW7-wkb_1RxZ6fN6rKDpCs8CmWW2YZNjT12MF2ZM5GhT21w2XtW4Q27RN8-l8MBW52D3_95Qny3BW4q4xNJ1X5BlNW2Gvj621cRXdlN289Ds1fytKbVnxzyS16QdMRW66JgJ55r2LQ2W3zWmCG15cwsvW96S_MP2_yD5tW8RDY6l6csGFPN5P9LLd4MdLH31ty1>[New Tactics Provide Invisibility Cloak to Ransomware Attacks](https://email.omnistruct.com/e2t/tc/VX09bl5MLlmYW2Y_Brv1fTjB2VVm64t4qL-CmN2glh_Z5nxG7V3Zsc37CgCgwW62KKrp21MfT3W8thcvS5TxBFVW2ytbtC76ZZpbW2NPScS5FP5rBW1SKRRd8kYS77W3RjTsS5gvFFRW2pCtz51B1BQqW3Lyr851-TfBrW92Sc2S1p74SzW5Lqq0d5K8qYLW45RRKn2DD03_W28jthw6BxXksW3HB4KX77YL0cW9gJ3-j3ljsyjW3PBwkm3RswGYW84J8lm6F2ChPVFLP7d4pkSQmW86LVgT1X0RmzW12B1m-8YzVs2W8GX2p_51_F9CVdqJDL6vxQdRW2lxkqx67b9M5W7YH1Rw6DnKnRN8kW1jhz9tvxW76skN6805ZWMW3bl02P6Q9HrjW34nLkK9dg7KmW21GTkP2JQGHMMQHJQrPcRtZW8vnlP37v0zcrN4dzxRH4Pg4hW53f5Kn84pkKP32Bx1)<https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN8064453p_b1V1-WJV7CgGgCW6r1n6g4HKmNfV2Q7LS7wMdKwW7LVXR_8dDx3LVcDV8P8GWBSsW1BkxcD7b6m8NW4s6z0B8qqPHBW3y8HHj329BtCW7dFZYY1Sr760W3zSPZc30BWm9W2-T_bS1MW0F0W7G5ppX2q8RCGN7nFkgsSGlGZW27nDgw7HLS77W4S-PFW2btLwHW3fmtF46DLxHpW7-wkb_1RxZ6fN6rKDpCs8CmWW2YZNjT12MF2ZM5GhT21w2XtW4Q27RN8-l8MBW52D3_95Qny3BW4q4xNJ1X5BlNW2Gvj621cRXdlN289Ds1fytKbVnxzyS16QdMRW66JgJ55r2LQ2W3zWmCG15cwsvW96S_MP2_yD5tW8RDY6l6csGFPN5P9LLd4MdLH31ty1><https://securityboulevard.com/2020/10/what-tech-companies-need-to-know-about-the-safe-data-act/>

Ransomware operators are increasingly using new tactics and strategies to make their attacks more effective. This includes new methods of putting more pressure on victims, such as the use of the double extortion technique, as well as new business tactics such as cartel formation. By Cyware Alerts I April 21, 2021

 

 

| [**Download our latest Infographic Now!**](https://email.omnistruct.com/e2t/tc/MWbjS6xRndcW96M3j61PD7j2W4FBnYy4qt6XxN80642D5nxGLV3Zsc37CgDQ4W36CNvT6vsB_CW1fSTGv7P6R4rVy0BQ21RyDzrW5qF27P4tTqD-W7Sp65_3LYjnTW77LVzs4p82fxW4GRLMm7DlRLNW7b83Sx4bVH1QN81M_znLN2cKW7cFqcB2CsTVpW9l_SMy26tz7lW92gwKg33wTjnW6yj8Xg667vXTTgvZ04L3D7KW3FpH8W650-VNW2BQ78C1dv5mDW9bJn9B15BlkzN2L9mWTRJFzcW3RDG1B8L4PcnW5TyskF4xBbSFW43S4x24GX888W1RKbnS1gvB7yW5BlQ7t3F2F0zW67JzZ16htQkQVHGKR96f3lH5W2ppFWd6r_6PxW64Dj_L19RZ46W61kvfb215mJVW1S8vs_1fsYHxW5RnyZM6NRJXYW6bhz_g1vz2fVW4H9FK95hLVk-W8zlw_K7s2kWGW7s3df91ykd3tN3D18n63mgVFW6cgbgx8r7sKD33nL1) |
| --- |

| Sincerely, **Omnistruct Marketing** 866-683-8827 [www.omnistruct.com](https://omnistruct.com/?utm_campaign=Cybersecurity%20News&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--bZS74_WZe1IDlpd0Z6DuKMLZcZmRMDuUWzB2uaX6wFusI-z5BS8N513GN3u_X92ecTCaX) Omnistruct, 2740 Fulton Avenue #101-02, Sacramento, CA 95821, USA, (866) 683-8827 [Unsubscribe                  ](https://email.omnistruct.com/business-information-security-news-october-9-2020#)[Manage preferences](https://email.omnistruct.com/business-information-security-news-october-9-2020#) |
| --- |

  

[View full post](https://blog.omnistruct.com/enterprise-technical-security-that-matters-april-23-2021)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Omnistruct Marketing"
  },
  "dateModified" : "2021-04-23T19:14:21.495Z",
  "datePublished" : "2021-04-23T19:14:21Z",
  "headline" : "Enterprise Technical Security That Matters - April 23, 2021",
  "image" : {
    "@type" : "ImageObject",
    "height" : 627,
    "url" : "https://cdn2.hubspot.net/hub/5223782/hubfs/Newsletter/March%20Newsletter%20Graphic.png?upscale=true&width=1116&upscale=true&name=March%20Newsletter%20Graphic.png",
    "width" : 1116
  },
  "mainEntityOfPage" : "https://blog.omnistruct.com/enterprise-technical-security-that-matters-april-23-2021",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/5223782/Omnistruct1-1.png",
      "width" : 282.48926
    },
    "name" : "Newsletters"
  }
}
```