❌ APT36 Taps Coronavirus as ‘Golden Opportunity’ to Spread Crimson RAT ❌
📖 Read
via "Threatpost".
The Pakistani-linked APT has been spotted infecting victims with data exfiltration malware.📖 Read
via "Threatpost".
Threat Post
APT36 Taps Coronavirus as ‘Golden Opportunity’ to Spread Crimson RAT
The Pakistani-linked APT has been spotted infecting victims with data exfiltration malware.
🔐 How to protect your organization from security threats amidst the rise in telecommuters 🔐
📖 Read
via "Security on TechRepublic".
Security becomes a greater challenge as more people work from home due to the coronavirus. Learn how to better protect your organization and employees.📖 Read
via "Security on TechRepublic".
TechRepublic
How to protect your organization from security threats amidst the rise in telecommuters
Security becomes a greater challenge as more people work from home due to the coronavirus. Learn how to better protect your organization and employees.
🕴 Remote Workforce Jumps 15% In Two Weeks 🕴
📖 Read
via "Dark Reading: ".
Netskope reports the total number of remote employees is the highest it has ever observed.📖 Read
via "Dark Reading: ".
Dark Reading
Remote Workforce Jumps 15% In Two Weeks
Netskope reports the total number of remote employees is the highest it has ever observed.
ATENTION‼ New - CVE-2019-11074
📖 Read
via "National Vulnerability Database".
A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in arbitrary locations with SYSTEM privileges (although not controlling the contents of such files) due to insufficient sanitisation when passing arguments to the phantomjs.exe binary. In order to exploit the vulnerability, remote authenticated administrators need to create a new HTTP Full Web Page Sensor and set specific settings when executing the sensor.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21037
📖 Read
via "National Vulnerability Database".
Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-18576
📖 Read
via "National Vulnerability Database".
The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/admin/dashboard/ URI.📖 Read
via "National Vulnerability Database".
🕴 This Tax Season, Save the Scorn and Protect Customers from Phishing Scams 🕴
📖 Read
via "Dark Reading: ".
As security professionals, it's easy to get cynical about the continued proliferation of tax ID theft and blame the consumers themselves. But that doesn't help anyone.📖 Read
via "Dark Reading: ".
Dark Reading
This Tax Season, Save the Scorn and Protect Customers from Phishing Scams
As security professionals, it's easy to get cynical about the continued proliferation of tax ID theft and blame the consumers themselves. But that doesn't help anyone.
🕴 Security Lessons We've Learned (So Far) from COVID-19 🕴
📖 Read
via "Dark Reading: ".
Takeaways about fighting new fires, securely enabling remote workforces, and human nature during difficult times.📖 Read
via "Dark Reading: ".
Dark Reading
Security Lessons We've Learned (So Far) from COVID-19
Takeaways about fighting new fires, securely enabling remote workforces, and human nature during difficult times.
🔏 Canadian Govt Prioritizing Rules Around Insider Threats 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Following a high profile espionage case, Canada is set to roll out a new set of protocols designed to stop insider threats within government departments.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Canadian Govt Prioritizing Rules Around Insider Threats
Following a high profile espionage case, Canada is set to roll out a new set of protocols designed to stop insider threats within government departments.
🕴 Startup Offering Secure Access to Corporate Apps Emerges from Stealth 🕴
📖 Read
via "Dark Reading: ".
Axis Security has raised $17 million in VC funding.📖 Read
via "Dark Reading: ".
Dark Reading
Startup Offering Secure Access to Corporate Apps Emerges from Stealth
Axis Security has raised $17 million in VC funding.
🕴 Attorney General Directs DoJ to Prioritize Coronavirus Crime 🕴
📖 Read
via "Dark Reading: ".
Criminal activity related to the pandemic cannot be tolerated, William Barr states in memo.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
❌ This Stalkerware Delivers Extra-Creepy Features ❌
📖 Read
via "Threatpost".
Stalkerware called Monitor Minor gives users the ability to creep on a target’s missives swapped via Instagram, Skype and Snapchat.📖 Read
via "Threatpost".
Threat Post
This Stalkerware Delivers Extra-Creepy Features
Stalkerware called Monitor Minor gives users the ability to creep on a target’s missives swapped via Instagram, Skype and Snapchat.
❌ A COVID-19 Cybersecurity Poll: Securing a Remote Workforce ❌
📖 Read
via "Threatpost".
COVID-19 is changing how we work. Weigh in on how your organization is securing its remote footprint with our short Threatpost poll.📖 Read
via "Threatpost".
Threat Post
A COVID-19 Cybersecurity Poll: Securing a Remote Workforce
COVID-19 is changing how we work. Weigh in on how your organization is securing its remote footprint with our short Threatpost poll.
ATENTION‼ New - CVE-2019-11939
📖 Read
via "National Vulnerability Database".
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00.📖 Read
via "National Vulnerability Database".
❌ Magecart Cyberattack Targets NutriBullet Website ❌
📖 Read
via "Threatpost".
Researchers warn that a Magecart group has set up skimmers on the blender manufacturer's website, in hopes of stealing customer payment-card data.📖 Read
via "Threatpost".
Threat Post
Magecart Cyberattack Targets NutriBullet Website
Researchers warn that a Magecart group has set up skimmers on the blender manufacturer's website, in hopes of stealing customer payment-card data.
⚠ Human traffickers use social media oversharing to gain victims’ trust ⚠
📖 Read
via "Naked Security".
Posts about money or family trouble are being used to gain trust by those who force victims into sex work or slavery, the FBI warns.📖 Read
via "Naked Security".
Naked Security
Human traffickers use social media oversharing to gain victims’ trust
Posts about money or family trouble are being used to gain trust by those who force victims into sex work or slavery, the FBI warns.
⚠ DDoS attack on US Health agency part of coordinated campaign ⚠
📖 Read
via "Naked Security".
It coincided with a disinformation campaign carried out via SMS, email and social media claiming that national quarantine was imminent.📖 Read
via "Naked Security".
Naked Security
DDoS attack on US Health agency part of coordinated campaign
It coincided with a disinformation campaign carried out via SMS, email and social media claiming that national quarantine was imminent.
⚠ Uber to file federal suit against LA over users’ real-time location data ⚠
📖 Read
via "Naked Security".
Real-time, in-trip geolocation data isn't good for traffic/bike lane planning, a draft of the suit says. What it's good for is surveillance.📖 Read
via "Naked Security".
Naked Security
Uber to file federal suit against LA over users’ real-time location data
Real-time, in-trip geolocation data isn’t good for traffic/bike lane planning, a draft of the suit says. What it’s good for is surveillance.
⚠ VMware patches virtualisation bugs ⚠
📖 Read
via "Naked Security".
Virtualisation company VMware patched two bugs this week that affected a large proportion of its client-side virtual machines.📖 Read
via "Naked Security".
Naked Security
VMware patches virtualisation bugs
Virtualisation company VMware patched two bugs this week that affected a large proportion of its client-side virtual machines.
❌ Authorities Eye Using Mobile Phone Tracking COVID-19’s Spread ❌
📖 Read
via "Threatpost".
Privacy advocates advise caution when tracking the movements of patients or those infected with the new coronavirus, as an effort to minimize the pandemic’s effect.📖 Read
via "Threatpost".
Threat Post
Authorities Eye Using Mobile Phone Tracking COVID-19’s Spread
Privacy advocates advise caution when tracking the movements of patients or those infected with the new coronavirus, as an effort to minimize the pandemic’s effect.