🕴 Checkmarx Acquires Custodela 🕴
📖 Read
via "Dark Reading: ".
The purchase adds DevSecOps capabilities to a software license compliance platform.📖 Read
via "Dark Reading: ".
Dark Reading
Checkmarx Acquires Custodela
The purchase adds DevSecOps capabilities to a software license compliance platform.
🕴 Crytpocurrency Exchange Targeted Via Attack on Web Traffic Analysis Firm 🕴
📖 Read
via "Dark Reading: ".
"Island-hopping" attackers breached StatCounter so they could get to users of gate.io.📖 Read
via "Dark Reading: ".
Dark Reading
Crytpocurrency Exchange Targeted Via Attack on Web Traffic Analysis Firm
Island-hopping attackers breached StatCounter so they could get to users of gate.io.
🕴 Finding Gold in the Threat Intelligence Rush 🕴
📖 Read
via "Dark Reading: ".
Researchers sift through millions of threat intel observations to determine where to best find valuable threat data.📖 Read
via "Dark Reading: ".
Dark Reading
Finding Gold in the Threat Intelligence Rush
Researchers sift through millions of threat intel observations to determine where to best find valuable threat data.
🕴 New Side-Channel Attacks Target Graphics Processing Units 🕴
📖 Read
via "Dark Reading: ".
A trio of new attacks bypass CPUs to wring data from vulnerable GPUs.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading
⚠ Phone companies slammed for lousy robocall efforts ⚠
📖 Read
via "Naked Security".
By this time next year, says Chairman Ajit Pai, the FCC wants to see an anti-robocall system on consumers' phones - or else.📖 Read
via "Naked Security".
Naked Security
Phone companies slammed for lousy robocall efforts
By this time next year, says Chairman Ajit Pai, the FCC wants to see an anti-robocall system on consumers’ phones – or else.
⚠ Google warning: Fix your dodgy ads within 30 days or get banned ⚠
📖 Read
via "Naked Security".
Having taken what it thought was a decisive swipe at the problem of “abusive” advertising a year ago, Google now says next month’s Chrome 71 will unleash an even tougher crackdown.📖 Read
via "Naked Security".
Naked Security
Google warning: Fix your dodgy ads within 30 days or get banned
Having taken what it thought was a decisive swipe at the problem of “abusive” advertising a year ago, Google now says next month’s Chrome 71 will unleash an even tougher crackdown.
⚠ Closed doors are no match for a Wi‑Fi peeping tom and a smartphone ⚠
📖 Read
via "Naked Security".
Researchers have found that a smartphone and some smart number crunching can track people moving in their homes as they reflect radio waves.📖 Read
via "Naked Security".
Naked Security
Closed doors are no match for a Wi‑Fi peeping tom and a smartphone
Researchers have found that a smartphone and some smart number crunching can track people moving in their homes as they reflect radio waves.
❌ Apple Modernizes Its Hardware Security with T2 ❌
📖 Read
via "The first stop for security news | Threatpost ".
Apple has widened the range of Macs running its T2 security chip. Is macOS finally catching up with other platforms when it comes to secure computing?📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Apple Modernizes Its Hardware Security with T2
Apple has widened the range of Macs running its T2 security chip. Is macOS finally catching up with other platforms when it comes to secure computing?
⚠ Ranting researcher publishes VM-busting zero-day without warning ⚠
📖 Read
via "Naked Security".
A security researcher has published a zero-day flaw in a commonly-used virtual machine management system without notifying the vendor, justifying it with a scathing critique of the infosecurity industry.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
❌ Podcast: Troy Hunt Talks Bad Passwords – and Who’s to Blame for Them ❌
📖 Read
via "The first stop for security news | Threatpost ".
Troy Hunt sounds off on how both consumers and services have a joint role in creating and enforcing strong passwords.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Podcast: Troy Hunt Talks Bad Passwords – and Who’s to Blame for Them
Troy Hunt sounds off on how both consumers and services have a joint role in creating and enforcing strong passwords.
🕴 The Executive Summit Returns to Black Hat Europe 2018 🕴
📖 Read
via "Dark Reading: ".
This day-long event for CISOs and execs will show you the way to next-level skills, strategies, and techniques that will bolster your relevance and wow the board.📖 Read
via "Dark Reading: ".
Dark Reading
The Executive Summit Returns to Black Hat Europe 2018 - Dark Reading
This day-long event for CISOs and execs will show you the way to next-level skills, strategies, and techniques that will bolster your relevance and wow the board.
❌ DJI Patches Forum Bug That Allowed Drone Account Takeovers ❌
📖 Read
via "The first stop for security news | Threatpost".
Bug opened door for malicious link attack, giving hacker access to stored DJI drone data of commercial and consumer customers.📖 Read
via "The first stop for security news | Threatpost".
Threat Post
DJI Patches Forum Bug That Allowed Drone Account Takeovers
Bug opened door for malicious link attack, giving hacker access to stored DJI drone data of commercial and consumer customers.
🔐 Watch out for bogus warnings to downgrade Windows 10 🔐
📖 Read
via "Security on TechRepublic".
Windows 10 users running genuine copies of the Pro edition are being told to swap to Windows 10 Home after what appears to be an issue with Microsoft's activation servers.📖 Read
via "Security on TechRepublic".
ATENTION‼ New - CVE-2018-11777
📖 Read
via "National Vulnerability Database".
In Apache Hive 2.3.3, 3.1.0 and earlier, local resources on HiveServer2 machines are not properly protected against malicious user if ranger, sentry or sql standard authorizer is not in use.📖 Read
via "National Vulnerability Database".
🕴 5 Things the Most Secure Software Companies Do (and How You Can Be Like Them) 🕴
📖 Read
via "Dark Reading: ".
What sets apart the largest and most innovative software engineering organizations? These five approaches are a good way to start, and they won't break the bank.📖 Read
via "Dark Reading: ".
Darkreading
5 Things the Most Secure Software Companies Do (and How You Can Be Like Them)
What sets apart the largest and most innovative software engineering organizations? These five approaches are a good way to start, and they won't break the bank.
🔐 How to disable simultaneous multithreading on Lenovo ThinkPads 🔐
📖 Read
via "Security on TechRepublic".
Major side-channel exploits demonstrated the feasibility of programs extracting data from a program in an adjacent thread in the same core. Here's how and why to protect your ThinkPad.📖 Read
via "Security on TechRepublic".
TechRepublic
How to disable simultaneous multithreading on Lenovo ThinkPads | TechRepublic
Major side-channel exploits demonstrated the feasibility of programs extracting data from a program in an adjacent thread in the same core. Here's how and why to protect your ThinkPad.
❌ ‘DerpTroll’ Faces 10 Years in Prison for DDoSing Gaming Sites as a Teen ❌
📖 Read
via "Threatpost | The first stop for security news".
He admitted to taking Steam, EA Origin and Sony Online Entertainment offline in 2013 and 2014, causing at least $95,000 in damages.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
‘DerpTroll’ Faces 10 Years in Prison for DDoSing Gaming Sites as a Teen
He admitted to taking Steam, EA Origin and Sony Online Entertainment offline in 2013 and 2014, causing at least $95,000 in damages.
ATENTION‼ New - CVE-2018-0284
📖 Read
via "National Vulnerability Database".
A vulnerability in the local status page functionality of the Cisco Meraki MR, MS, MX, Z1, and Z3 product lines could allow an authenticated, remote attacker to modify device configuration files. The vulnerability occurs when handling requests to the local status page. An exploit could allow the attacker to establish an interactive session to the device with elevated privileges. The attacker could then use the elevated privileges to further compromise the device or obtain additional configuration data from the device that is being exploited.📖 Read
via "National Vulnerability Database".
❌ Cisco Accidentally Released Dirty Cow Exploit Code in Software ❌
📖 Read
via "Threatpost | The first stop for security news".
Cisco revealed that it had "inadvertently" shipped an in-house exploit code that was used in test scripts as part of its TelePresence Video Communication Server and Expressway Series software.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Cisco Accidentally Released Dirty Cow Exploit Code in Software
The most severe vulnerability, CVE-2018-15439, has a CVSS severity score of 9.8 (out of 10).
⚠ Apple 0, José 3 – Man versus Megacorp! [PODCAST] ⚠
📖 Read
via "Naked Security".
Here's the latest Naked Security Podcast - enjoy!📖 Read
via "Naked Security".
Naked Security
Apple 0, José 3 – Man versus Megacorp! [PODCAST]
Here’s the latest Naked Security Podcast – enjoy!
🕴 Banking Malware Takes Aim at Brazilians 🕴
📖 Read
via "Dark Reading: ".
Two malware distribution campaigns are sending banking Trojans to customers of financial institutions in Brazil.📖 Read
via "Dark Reading: ".
Darkreading
Banking Malware Takes Aim at Brazilians
Two malware distribution campaigns are sending banking Trojans to customers of financial institutions in Brazil.