🔐 Open Cybersecurity Alliance looks for new members and new projects at RSA 2020 🔐
📖 Read
via "Security on TechRepublic".
New standards project aims to make it easy to integrate multiple security tools.📖 Read
via "Security on TechRepublic".
TechRepublic
Open Cybersecurity Alliance looks for new members and new projects at RSA 2020
New standards project aims to make it easy to integrate multiple security tools.
🕴 Tense Talk About Supply Chain Risk Yields Few Answers 🕴
📖 Read
via "Dark Reading: ".
RSA panelists locked horns over whether the ban preventing US government agencies from doing business with Huawei is unfairly singling out the Chinese telecom giant.📖 Read
via "Dark Reading: ".
Dark Reading
Tense Talk About Supply Chain Risk Yields Few Answers
RSA panelists locked horns over whether the ban preventing US government agencies from doing business with Huawei is unfairly singling out the Chinese telecom giant.
❌ RSAC 2020: GM’s Transportation Future Hinges on Cybersecurity ❌
📖 Read
via "Threatpost".
CEO Mary T. Barra addressed the high stakes in rolling out self-driving cars and biometric-enhanced vehicles, where one cyber-event could derail plans for emerging automotive technologies.📖 Read
via "Threatpost".
Threat Post
RSAC 2020: GM’s Transportation Future Hinges on Cybersecurity
CEO Mary T. Barra addressed the high stakes in rolling out self-driving cars and biometric-enhanced vehicles, where one cyber-event could derail plans for emerging automotive technologies.
🕴 Government Employees Unprepared for Ransomware 🕴
📖 Read
via "Dark Reading: ".
Data shows 73% are concerned about municipal ransomware threats but only 38% are trained on preventing these attacks.📖 Read
via "Dark Reading: ".
Darkreading
Government Employees Unprepared for Ransomware
Data shows 73% are concerned about municipal ransomware threats but only 38% are trained on preventing these attacks.
ATENTION‼ New - CVE-2018-8878
📖 Read
via "National Vulnerability Database".
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the custom_id variable on the blocking.asp page.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-8877
📖 Read
via "National Vulnerability Database".
Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network IP address ranges by reading the new_lan_ip variable on the error_page.htm page.📖 Read
via "National Vulnerability Database".
❌ Google’s War on Android App Permissions, 60 Percent Successful ❌
📖 Read
via "Threatpost".
An automated Google warning to Android app developers regarding mobile app permissions has cut the number of requests in half.📖 Read
via "Threatpost".
Threat Post
Google’s War on Android App Permissions, 60 Percent Successful
An automated Google warning to Android app developers regarding mobile app permissions has cut the number of requests in half.
🕴 Clearview AI Customers Exposed in Data Breach 🕴
📖 Read
via "Dark Reading: ".
Customers for the controversial facial recognition company were detailed in a log file leaked to news organizations.📖 Read
via "Dark Reading: ".
Darkreading
Clearview AI Customers Exposed in Data Breach
Customers for the controversial facial recognition company were detailed in a log file leaked to news organizations.
🛠 I2P 0.9.45 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties. This is the source code release version.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
I2P 0.9.45 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Samhain File Integrity Checker 4.4.1 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Samhain is a file system integrity checker that can be used as a client/server application for centralized monitoring of networked hosts. Databases and configuration files can be stored on the server. Databases, logs, and config files can be signed for tamper resistance. In addition to forwarding reports to the log server via authenticated TCP/IP connections, several other logging facilities (e-mail, console, and syslog) are available. Tested on Linux, AIX, HP-UX, Unixware, Sun and Solaris.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Samhain File Integrity Checker 4.4.1 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Zeek 3.1.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek has successfully bridged the traditional gap between academia and operations since its inception. Today, it is relied upon operationally in particular by many scientific environments for securing their cyber-infrastructure. Zeek's user community includes major universities, research labs, supercomputing centers, and open-science communities.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Zeek 3.1.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Wireshark Analyzer 3.2.2 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Wireshark Analyzer 3.2.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
⚠ Google has right to censor conservative nonprofit on YouTube ⚠
📖 Read
via "Naked Security".
It's not a "state actor", so isn't subject to 1st Amendment scrutiny and can censor PragerU's videos on abortion, gun rights and terrorism.📖 Read
via "Naked Security".
Naked Security
Google has right to censor conservative nonprofit on YouTube
It’s not a “state actor”, so isn’t subject to 1st Amendment scrutiny and can censor PragerU’s videos on abortion, gun rights and terrorism.
⚠ Firefox rolling out DNS-over-HTTPS privacy by default in the US ⚠
📖 Read
via "Naked Security".
Mozilla has said it plans to make a privacy technology called DNS-over-HTTPS (DoH) the default setting for US users of Firefox within weeks.📖 Read
via "Naked Security".
Naked Security
Firefox rolling out DNS-over-HTTPS privacy by default in the US
Mozilla has said it plans to make a privacy technology called DNS-over-HTTPS (DoH) the default setting for US users of Firefox within weeks.
⚠ Ransomware wipes evidence, lets suspected drug dealers walk free ⚠
📖 Read
via "Naked Security".
Six alleged drug criminals will go free thanks to a ransomware attack on a small Florida city, it was revealed this month.📖 Read
via "Naked Security".
Naked Security
Ransomware wipes evidence, lets suspected drug dealers walk free
Six alleged drug criminals will go free thanks to a ransomware attack on a small Florida city, it was revealed this month.
⚠ Clearview AI loses entire database of faceprint-buying clients to hackers ⚠
📖 Read
via "Naked Security".
Time to worry about how well the facial recognition startup protects its 3b+ database of faceprints scraped from our social media accounts?📖 Read
via "Naked Security".
Naked Security
Clearview AI loses entire database of faceprint-buying clients to hackers
Time to worry about how well the facial recognition startup protects its 3b+ database of faceprints scraped from our social media accounts?
🕴 Educating Educators: Microsoft's Tips for Security Awareness Training 🕴
📖 Read
via "Dark Reading: ".
Microsoft's director of security education and awareness shares his approach to helping train employees in defensive practices.📖 Read
via "Dark Reading: ".
Dark Reading
Cyber Risk recent news | Dark Reading
Explore the latest news and expert commentary on Cyber Risk, brought to you by the editors of Dark Reading
❌ Patrick Wardle: Apple Devices Hit With Recycled macOS Malware ❌
📖 Read
via "Threatpost".
Patrick Wardle talks about the biggest threats he's seeing impacting Apple devices.📖 Read
via "Threatpost".
Threat Post
Patrick Wardle: Apple Devices Hit With Recycled macOS Malware
Patrick Wardle talks about the biggest threats he's seeing impacting Apple devices.
❌ RSAC 2020: Ransomware a ‘National Crisis,’ CISA Says, Ramps ICS Focus ❌
📖 Read
via "Threatpost".
The federal agency plans a slew of initiatives to address industrial control security this year.📖 Read
via "Threatpost".
Threat Post
RSAC 2020: Ransomware a ‘National Crisis,’ CISA Says, Ramps ICS Focus
The federal agency plans a slew of initiatives to address industrial control security this year.
🕴 Reducing Risk with Data Minimization 🕴
📖 Read
via "Dark Reading: ".
Putting your company on a data diet that reduces the amount of the sensitive data you store or use is a smart way to achieve compliance with GDPR and CCPA.📖 Read
via "Dark Reading: ".
Dark Reading
Reducing Risk with Data Minimization - Dark Reading
Putting your company on a data diet that reduces the amount of the sensitive data you store or use is a smart way to achieve compliance with GDPR and CCPA.