Latest cybersecurity reporting from selected sources.

Patches Issued for MongoBleed as Ransomware Groups Target Flaw to Steal DataTens of thousands of internet-exposed MongoDB databases are at risk as attackers actively target a critical vulnerability in the software to steal sensitive data, with ransomware groups having joined the fray, researchers warn. MongoDB has issued patches and mitigation advice.

Public-Private Cooperation Key for Ransomware Mitigation, Says Anne NeubergerOngoing, high-profile ransomware attacks against Britain and the United States have transformed cybersecurity into a national security priority, Anne Neubehttps://cms.ismgcorp.com/userpolicy/titlelevelrger, the former White House deputy national security adviser for cyber, said at a Wednesday event in London.

Security Experts Advise Immediate Patching; Zero-Day Attacks Began Last MonthAffiliates of Russian-speaking ransomware operation Medusa began targeting a zero-day vulnerability in widely used Fortra GoAnywhere Managed File Transfer software one week before the vendor issued a security alert, patch and mitigation instructions for the flaw, say security experts.

Hackers Using Valid Customer Credentials to Re-Encrypt S3 ObjectsAmazon is urging its customers to deploy additional security measures to secure S3 buckets following reports of ransomware attacks targeting the platform. The company said mitigations prevented "a high percentage of attempts from succeeding."

Former Royal Mail and Manchester University CISOs Talk Ransomware ResponseTimely notification of ransomware incidents to British law enforcement agencies played a crucial role in understanding the threats and in developing mitigation strategies, the former security heads of Royal Mail and the University of Manchester said.

Amid COVID-19 Ransomware Woes, Sanaz Yashar's Frustration Sparked Zafran's BirthFaced with relentless cyberattacks and the shortcomings of existing defenses, Sanaz Yashar embarked on a journey to create a security risk and mitigation platform, transforming frustration into startup Zafran, which emerged from stealth Thursday with more than $30 million in funding.