🕴 CSO's Guide to 'Employee-First' Security Operations During COVID-19 & Beyond 🕴
📖 Read
via "Dark Reading: ".
As the work-at-home environment continues to inform new ways of doing business, it's important that security teams remain flexible and ready for change.📖 Read
via "Dark Reading: ".
Dark Reading
CSO's Guide to 'Employee-First' Security Operations During COVID-19 & Beyond
As the work-at-home environment continues to inform new ways of doing business, it's important that security teams remain flexible and ready for change.
🔐 A strong relationship between security and engineering teams accelerates the transition to DevSecOps 🔐
📖 Read
via "Security on TechRepublic".
Embracing an "everyone is part of the security team" approach shifts DevOps to DevSecOps, according to a report from Cobalt.io.📖 Read
via "Security on TechRepublic".
TechRepublic
A strong relationship between security and engineering teams accelerates the transition to DevSecOps
Embracing an "everyone is part of the security team" approach shifts DevOps to DevSecOps, according to a report from Cobalt.io.
❌ Dark Basin Hack-For-Hire Group Targeted Thousands Over 7 Years ❌
📖 Read
via "Threatpost".
Thousands of journalists, advocacy groups and politicians worldwide were targeted by Dark Basin.📖 Read
via "Threatpost".
Threat Post
Dark Basin Hack-For-Hire Group Targeted Thousands Over 7 Years
Thousands of journalists, advocacy groups and politicians worldwide were targeted by Dark Basin.
🕴 Honda Pauses Production Due to Cyberattack 🕴
📖 Read
via "Dark Reading: ".
The attack reportedly infected internal servers and forced Honda to halt production at plants around the world on Monday.📖 Read
via "Dark Reading: ".
Dark Reading
Honda Pauses Production Due to Cyberattack
The attack reportedly infected internal servers and forced Honda to halt production at plants around the world on Monday.
❌ Adobe Warns of Critical Flaws in Flash Player, Framemaker ❌
📖 Read
via "Threatpost".
Critical Adobe Flash Player and Framemaker flaws could enable arbitrary code execution.📖 Read
via "Threatpost".
Threat Post
Adobe Warns of Critical Flaws in Flash Player, Framemaker
Critical Adobe Flash Player and Framemaker flaws could enable arbitrary code execution.
⚠ Facebook labels ‘state-controlled’ Russian, Chinese, Iranian media ⚠
📖 Read
via "Naked Security".
Facebook users will see notices labeling "state-controlled media", based on criteria such as funding, editorial independence, ownership structure and more.📖 Read
via "Naked Security".
Naked Security
Facebook labels ‘state-controlled’ Russian, Chinese, Iranian media
Facebook users will see notices labeling “state-controlled media”, based on criteria such as funding, editorial independence, ownership structure and more.
🛠 Haveged 1.9.9 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
haveged is a daemon that feeds the /dev/random pool on Linux using an adaptation of the HArdware Volatile Entropy Gathering and Expansion algorithm invented at IRISA. The algorithm is self-tuning on machines with cpuid support, and has been tested in both 32-bit and 64-bit environments. The tarball uses the GNU build mechanism, and includes self test targets and a spec file for those who want to build an RPM.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Haveged 1.9.9 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Hack-for-Hire Firm Connected to Attacks on Nonprofits, Journalists 🕴
📖 Read
via "Dark Reading: ".
The Dark Basin group behind thousands of phishing and malware attacks is likely an India-based "ethical hacking" firm that works on behalf of commercial clients.📖 Read
via "Dark Reading: ".
Dark Reading
Hack-for-Hire Firm Connected to Attacks on Nonprofits, Journalists
The Dark Basin group behind thousands of phishing and malware attacks is likely an India-based ethical hacking firm that works on behalf of commercial clients.
❌ Espionage Group Hits U.S. Utilities with Sophisticated Spy Tool ❌
📖 Read
via "Threatpost".
The FlowCloud modular remote-access trojan (RAT) has overlaps with the LookBack malware.📖 Read
via "Threatpost".
Threat Post
Espionage Group Hits U.S. Utilities with Sophisticated Spy Tool
The FlowCloud RAT has overlaps with the LookBack malware and possibly China-linked APT10.
🕴 Will Vote-by-App Ever Be Safe? 🕴
📖 Read
via "Dark Reading: ".
Even with strong security measures, Internet voting is still vulnerable to abuse from state-sponsored actors and malicious insiders.📖 Read
via "Dark Reading: ".
Dark Reading
Will Vote-by-App Ever Be Safe?
Even with strong security measures, Internet voting is still vulnerable to abuse from state-sponsored actors and malicious insiders.
❌ Microsoft June Patch Tuesday Fixes 129 Flaws in Largest-Ever Update ❌
📖 Read
via "Threatpost".
The June Patch Tuesday update included CVEs for 11 critical remote code-execution vulnerabilities and concerning SMB bugs.📖 Read
via "Threatpost".
Threat Post
Microsoft June Patch Tuesday Fixes 129 Flaws in Largest-Ever Update
The June Patch Tuesday update included CVEs for 11 critical remote code-execution vulnerabilities and concerning SMB bugs.
🔏 Macy’s to Settle 2018 Data Breach Class Action Suit 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Two years after it happened, the popular department store is electing to settle a class action data breach lawsuit that alleged the company failed to properly secure customer data online.📖 Read
via "Subscriber Blog RSS Feed ".
🕴 DHS Warns on New Exploit of Windows 10 Vulnerability 🕴
📖 Read
via "Dark Reading: ".
The vulnerability was patched in March, but a new proof of concept raises the stakes for organizations that haven't yet updated their software.📖 Read
via "Dark Reading: ".
Dark Reading
DHS Warns on New Exploit of Windows 10 Vulnerability
The vulnerability was patched in March, but a new proof of concept raises the stakes for organizations that haven't yet updated their software.
🕴 Vulnerability in Plug-and-Play Protocol Puts Billions of Devices at Risk 🕴
📖 Read
via "Dark Reading: ".
"CallStranger" flaw in UPnP allows attackers to launch DDoS attacks and scan internal ports, security researcher says.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerability in Plug-and-Play Protocol Puts Billions of Devices at Risk
CallStranger flaw in UPnP allows attackers to launch DDoS attacks and scan internal ports, security researcher says.
🔐 How to install sudo 1.9 and use the new policy tool 🔐
📖 Read
via "Security on TechRepublic".
The sudo system is about to undergo some radical changes. Find out how to begin working with the new policy system, to make sudo even more powerful.📖 Read
via "Security on TechRepublic".
TechRepublic
How to install sudo 1.9 and use the new policy tool
The sudo system is about to undergo some radical changes. Find out how to begin working with the new policy system, to make sudo even more powerful.
🕴 Microsoft Fixes 129 Bugs in Largest Patch Tuesday Release 🕴
📖 Read
via "Dark Reading: ".
The June release of security updates addresses several remote code execution vulnerabilities in SharePoint, Excel, Windows OLE, and other services.📖 Read
via "Dark Reading: ".
Darkreading
Microsoft Fixes 129 Bugs in Largest Patch Tuesday Release
The June release of security updates addresses several remote code execution vulnerabilities in SharePoint, Excel, Windows OLE, and other services.
ATENTION‼ New - CVE-2019-3617
📖 Read
via "National Vulnerability Database".
Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-3613
📖 Read
via "National Vulnerability Database".
DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder.📖 Read
via "National Vulnerability Database".
⚠ Billions of devices affected by UPnP vulnerability ⚠
📖 Read
via "Naked Security".
Stop us if you’ve heard this before but a researcher has uncovered a new security vulnerability affecting many devices running the Universal Plug and Play (UPnP) protocol.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Babylon mobile health app mixes up patient consultation videos ⚠
📖 Read
via "Naked Security".
A heatlh care app user found 50 "consultation replay" videos in his personal profile - but they weren't his.📖 Read
via "Naked Security".
Naked Security
Babylon mobile health app mixes up patient consultation videos
A heatlh care app user found 50 “consultation replay” videos in his personal profile – but they weren’t his.
⚠ ‘Bot or Not?’ – a game to train us to spot chatbots faking it as humans ⚠
📖 Read
via "Naked Security".
Can you tell whether you're talking to a human or AI?📖 Read
via "Naked Security".
Naked Security
‘Bot or Not?’ – a game to train us to spot chatbots faking it as humans
Can you tell whether you’re talking to a human or AI?