🕴 7 Tips for Employers Navigating Remote Recruitment 🕴
📖 Read
via "Dark Reading: ".
Hiring experts explain how companies should approach recruitment when employers and candidates are working remotely.📖 Read
via "Dark Reading: ".
Dark Reading
7 Tips for Employers Navigating Remote Recruitment
Hiring experts explain how companies should approach recruitment when employers and candidates are working remotely.
⚠ Adobe drops slew of critical patches ⚠
📖 Read
via "Naked Security".
Adobe released another set of patches for its products on Tuesday, a week after dropping its first set of fixes for the month.📖 Read
via "Naked Security".
Naked Security
Adobe drops slew of critical patches
Adobe released another set of patches for its products on Tuesday, a week after dropping its first set of fixes for the month.
❌ InvisiMole Group Resurfaces Touting Fresh Toolset, Gamaredon Partnership ❌
📖 Read
via "Threatpost".
InvisiMole is back, targeting Eastern Europe organizations in the military sector and diplomatic missions with an updated toolset and new APT partnership.📖 Read
via "Threatpost".
Threat Post
InvisiMole Group Resurfaces Touting Fresh Toolset, Gamaredon Partnership
InvisiMole is back, targeting Eastern Europe organizations in the military sector and diplomatic missions with an updated toolset and new APT partnership.
⚠ Crypto founder admits $25 million ICO backed by celebrities was a scam ⚠
📖 Read
via "Naked Security".
Endorsed by boxer Floyd Mayweather and DJ Khaled, the Centra Tech ICO debacle has led to the guilty plea of co-founder Robert Farkas.📖 Read
via "Naked Security".
Naked Security
Crypto founder admits $25 million ICO backed by celebrities was a scam
Endorsed by boxer Floyd Mayweather and DJ Khaled, the Centra Tech ICO debacle has led to the guilty plea of co-founder Robert Farkas.
❌ Phishing Campaign Targeting Office 365, Exploits Brand Names ❌
📖 Read
via "Threatpost".
Attackers use trusted entities to trick victims into giving up their corporate log-in details as well as to bypass security protections.📖 Read
via "Threatpost".
Threat Post
Phishing Campaign Targeting Office 365, Exploits Brand Names
Attackers use trusted entities to trick victims into giving up their corporate log-in details as well as to bypass security protections.
❌ Five Password Tips for Securing the New WFH Normal ❌
📖 Read
via "Threatpost".
Darren James, product specialist with Specops Software, warned that password resets, for example, are a particularly vexing issue for sysadmins, as they can often lockout end-users from their accounts.📖 Read
via "Threatpost".
Threat Post
Five Password Tips for Securing the New WFH Normal
Darren James, product specialist with Specops Software, warned that password resets are a serious issue, as they can lockout end-users from their accounts.
❌ BofA Phish Gets Around DMARC, Other Email Protections ❌
📖 Read
via "Threatpost".
The June campaign was targeted and aimed at stealing online banking credentials.📖 Read
via "Threatpost".
Threat Post
BofA Phish Gets Around DMARC, Other Email Protections
The June campaign was targeted and aimed at stealing online banking credentials.
🔐 IT leaders say productivity went up during lockdown despite delaying projects and security work 🔐
📖 Read
via "Security on TechRepublic".
Survey finds that IT leaders plan to increase security measures when offices reopen.📖 Read
via "Security on TechRepublic".
TechRepublic
IT leaders say productivity went up during lockdown despite delaying projects and security work
Survey finds that IT leaders plan to increase security measures when offices reopen.
🕴 CISO Dialogue: How to Optimize Your Security Budget 🕴
📖 Read
via "Dark Reading: ".
CISOs are never going to have all the finances they want. Hard choices must be made. The CISO of Amazon Prime Video discusses his approaches to a slimmed-down budget.📖 Read
via "Dark Reading: ".
Dark Reading
CISO Dialogue: How to Optimize Your Security Budget
CISOs are never going to have all the finances they want. Hard choices must be made. The CISO of Amazon Prime Video discusses his approaches to a slimmed-down budget.
🔐 Continued reliance on passwords continues to compromise data security 🔐
📖 Read
via "Security on TechRepublic".
IT leaders remain under pressure to balance security and authentication methods, yet this remains a challenge for most organizations, according to a new report by Thales.📖 Read
via "Security on TechRepublic".
TechRepublic
Continued reliance on passwords continues to compromise data security
IT leaders remain under pressure to balance security and authentication methods, yet this remains a challenge for most organizations, according to a new report by Thales.
⚠ Bundlore adware brings a new nest of risks to Mac users ⚠
📖 Read
via "Naked Security".
A new SophosLabs report digs into the latest browser-hijacking "bundleware" targeting Mac users📖 Read
via "Naked Security".
Naked Security
Bundlore adware brings a new nest of risks to Mac users
A new SophosLabs report digs into the latest browser-hijacking “bundleware” targeting Mac users
🕴 Most Contact-Tracing Apps Fail Basic Security 🕴
📖 Read
via "Dark Reading: ".
A survey of 17 Android applications for informing citizens if they had potential contact with a COVD-19-infected individual finds few have adopted code-hardening techniques.📖 Read
via "Dark Reading: ".
Dark Reading
Most Contact-Tracing Apps Fail Basic Security
A survey of 17 Android applications for informing citizens if they had potential contact with a COVD-19-infected individual finds few have adopted code-hardening techniques.
🔐 FabulaTech USB device vulnerability exposes devices to risk 🔐
📖 Read
via "Security on TechRepublic".
A remote USB function in a software provider's code has been found to contain a significant vulnerability. Learn more about what it entails and how you should protect your systems.📖 Read
via "Security on TechRepublic".
TechRepublic
FabulaTech USB device vulnerability exposes devices to risk
A remote USB function in a software provider's code has been found to contain a significant vulnerability. Learn more about what it entails and how you should protect your systems.
⚠ Microsoft promises to fix Windows 10 printer problem ⚠
📖 Read
via "Naked Security".
Windows 10 updates released as part of last week’s Patch Tuesday appear to be making life hard for some printer users.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🔐 Zoom changes course on end-to-end encryption and offers it free to everyone 🔐
📖 Read
via "Security on TechRepublic".
Originally planned for premium accounts only, Zoom will now offer optional E2EE to all account holders.📖 Read
via "Security on TechRepublic".
TechRepublic
Zoom changes course on end-to-end encryption and offers it free to everyone
Originally planned for premium accounts only, Zoom will now offer optional E2EE to all account holders.
ATENTION‼ New - CVE-2017-9109
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the second answer scan finds the same RRs at the first. Otherwise, adns can be confused by interleaving answers for the CNAME target, with the CNAME itself. In that case the answer data structure (on the heap) can be overrun. With this fixed, it prefers to look only at the answer RRs which come after the CNAME, which is at least arguably correct.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9108
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r, since used is incremented according to r, later. Rather one should be doing what read() would have done. Without this fix, adnshost may read and process one byte beyond the buffer, perhaps crashing or perhaps somehow leaking the value of that byte.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9107
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with \, and adns_qf_quoteok_query was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart the input buffer and start processing many bytes of arbitrary heap data as if it were the query domain. Eventually it would run out of input or find some other kind of error, and declare the query domain invalid. But before then it might outrun available memory and crash. In principle this could be a denial of service attack.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9106
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun (depending on the sizes of the types on the current platform). Of course the inputs ought to be right. And there are pointers in there too, so perhaps one could say that the caller ought to check these things. It may be better to require the caller to make the pointer structure right, but to have the code here be defensive about (and tolerate with an error but without crashing) out-of-range integer values. So: it should defend each of these integer conversion sites with a check for the actual permitted range, and return adns_s_invaliddata if not. The lack of this check causes the SOA sign extension bug to be a serious security problem: the sign extended SOA value is out of range, and overruns the buffer when reconverted. This is related to sign extending SOA 32-bit integer fields, and use of a signed data type.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9105
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong number of pointer dereferences. This bug may well be exploitable as a remote code execution.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9104
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered.📖 Read
via "National Vulnerability Database".