❌ Enterprise Data Security: It’s Time to Flip the Established Approach ❌
📖 Read
via "Threatpost".
Companies should forget about auditing where data resides and who has access to it.📖 Read
via "Threatpost".
Threat Post
Enterprise Data Security: It’s Time to Flip the Established Approach
Companies should forget about auditing where data resides and who has access to it.
🕴 Major Flaws Open the Edge to Attack 🕴
📖 Read
via "Dark Reading: ".
Attackers are using critical exploits for flaws in VPN appliances, app-delivery services, and other network-edge hardware and software to punch through corporate perimeters. What can companies do?📖 Read
via "Dark Reading: ".
Dark Reading
Major Flaws Open the Edge to Attack
Attackers are using critical exploits for flaws in VPN appliances, app-delivery services, and other network-edge hardware and software to punch through corporate perimeters. What can companies do?
🕴 8 Signs of a Smartphone Hack 🕴
📖 Read
via "Dark Reading: ".
A rapidly dwindling battery life or sudden spike in data usage could indicate your iOS or Android device has been compromised.📖 Read
via "Dark Reading: ".
Dark Reading
8 Signs of a Smartphone Hack
A rapidly dwindling battery life or sudden spike in data usage could indicate your iOS or Android device has been compromised.
🔐 CISOs discuss cybersecurity in the COVID-19 environment 🔐
📖 Read
via "Security on TechRepublic".
A digital panel discussion sponsored by MIT's Sloan CIO Digital Learning Series covered a range of topics from protecting remote workers to phishing to how to manage risk.📖 Read
via "Security on TechRepublic".
TechRepublic
CISOs discuss cybersecurity in the COVID-19 environment
A digital panel discussion sponsored by MIT's Sloan CIO Digital Learning Series covered a range of topics from protecting remote workers to phishing to how to manage risk.
⚠ Apple’s latest updates are out for iPhones and Macs – get them now! ⚠
📖 Read
via "Naked Security".
None of Apple's bugs have nicknames like Microsoft's recent "SIGRed" - but there are nevertheless kernel-level code holes to be patched...📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🔐 How to install Malware Information Sharing Platform on Ubuntu Server 18.04 🔐
📖 Read
via "Security on TechRepublic".
If you're looking for a platform to help with the collection and sharing of cybersecurity events, you need not look any further than MISP. Jack Wallen shows you how to install this tool.📖 Read
via "Security on TechRepublic".
TechRepublic
How to install Malware Information Sharing Platform on Ubuntu Server 18.04
If you're looking for a platform to help with the collection and sharing of cybersecurity events, you need not look any further than MISP. Jack Wallen shows you how to install this tool.
❌ CISA Emergency Directive Orders Immediate Fix of Windows DNS Server Bug ❌
📖 Read
via "Threatpost".
An emergency directive orders some federal agencies to apply Microsoft’s patch for a critical DNS vulnerability by Friday, July 17 at 2 p.m. (ET).📖 Read
via "Threatpost".
Threat Post
CISA Emergency Directive Orders Immediate Fix of Windows DNS Server Bug
An emergency directive orders some federal agencies to apply Microsoft’s patch for a critical DNS vulnerability by Friday, July 17 at 2 p.m. ET.
🔐 Phishing: Email fraudsters are impersonating colleagues, customers, and vendors, report says 🔐
📖 Read
via "Security on TechRepublic".
Nearly a third of professionals said they have to remediate email-based attacks every day, GreatHorn found.📖 Read
via "Security on TechRepublic".
TechRepublic
Phishing: Email fraudsters are impersonating colleagues, customers, and vendors, report says
Nearly a third of professionals said they have to remediate email-based attacks every day, GreatHorn found.
❌ Twitter Hack Update: What We Know (and What We Don’t) ❌
📖 Read
via "Threatpost".
With limited confirmed information, a raft of theories and circumstantial evidence has come to light as to who was behind the attack and how they carried it out.📖 Read
via "Threatpost".
Threat Post
Twitter Hack Update: What We Know (and What We Don’t)
With limited confirmed information, a raft of theories and circumstantial evidence has come to light as to who was behind the attack and how they carried it out.
🕴 Cybercriminals Targeted Streaming Services to Provide Pandemic Entertainment 🕴
📖 Read
via "Dark Reading: ".
Prior to 2020, about 1 in 5 credential attacks targeted video services, but that's nothing compared to the first quarter of 2020, according to newly published data.📖 Read
via "Dark Reading: ".
Dark Reading
Cybercriminals Targeted Streaming Services to Provide Pandemic Entertainment
Prior to 2020, about 1 in 5 credential attacks targeted video services, but that's nothing compared to the first quarter of 2020, according to newly published data.
🕴 Election Security: Recovering from 2016, Looking Toward 2020 🕴
📖 Read
via "Dark Reading: ".
Researchers publish the results of a four-year investigation and discuss whether the US is ready to secure its largest elections.📖 Read
via "Dark Reading: ".
Dark Reading
Election Security: Recovering from 2016, Looking Toward 2020
Researchers publish the results of a four-year investigation and discuss whether the US is ready to secure its largest elections.
🔏 Friday Five: 7/17 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
US Secret Service forms a cyber fraud task force, Twitter deals with the hacking of high-profile Twitter accounts, and more - catch up on all the week's news with the Friday Five.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 7/17 Edition
US Secret Service forms a cyber fraud task force, Twitter deals with the hacking of high-profile Twitter accounts, and more - catch up on all the week's news with the Friday Five.
🛠 Sifter 8.5 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Sifter 8.5 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 SMB12 Information Gathering 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
SMB12 Information Gathering is a data gathering python script that inspects SMB1 and SMB2 endpoints. It will extract various attributes from the remote server such as OS version (only supported by SMB1 as per protocol definition), DNS computer name, DNS domain name, NetBIOS computer name and NetBIOS domain name (SMB1 and SMB2).📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
SMB12 Information Gathering ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ Thousands of Vulnerable F5 BIG-IP Users Still Open to Takeover ❌
📖 Read
via "Threatpost".
Less than 500 machines have been patched since U.S. Cyber Command issued an alert to patch a critical bug that's under active exploit.📖 Read
via "Threatpost".
Threat Post
Thousands of Vulnerable F5 BIG-IP Users Still Open to Takeover
Less than 500 machines have been patched since U.S. Cyber Command issued an alert to patch a critical bug that's under active exploit.
🕴 Emotet Lives! 🕴
📖 Read
via "Dark Reading: ".
Emotet malware has back to action after a four-month hiatus that allowed cybersecurity experts to worry about other things.📖 Read
via "Dark Reading: ".
Dark Reading
Emotet Lives!
Emotet malware has back to action after a four-month hiatus that allowed cybersecurity experts to worry about other things.
ATENTION‼ New - CVE-2019-4090
📖 Read
via "National Vulnerability Database".
"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field."📖 Read
via "National Vulnerability Database".
🔐 This new open source project could be key to securing database applications 🔐
📖 Read
via "Security on TechRepublic".
Commentary: Cyral has been on a roll with two open source projects designed to make security a natural part of the development workflow.📖 Read
via "Security on TechRepublic".
TechRepublic
This new open source project could be key to securing database applications
Commentary: Cyral has been on a roll with two open source projects designed to make security a natural part of the development workflow.
ATENTION‼ New - CVE-2019-12000
📖 Read
via "National Vulnerability Database".
HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an external USSD service logic application. Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging Gateway Configuration and Operations Guide.📖 Read
via "National Vulnerability Database".
⚠ Monday review – the hot stories of the week ⚠
📖 Read
via "Naked Security".
Catch up on the past week's stories, and watch our latest Naked Security Live video.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot stories of the week
Catch up on the past week’s stories, and watch our latest Naked Security Live video.
🔐 Microsoft Defender ATP for Android: This security software can help protect your devices and data 🔐
📖 Read
via "Security on TechRepublic".
Microsoft recently announced its first Android security tooling. But what is it for, and should you deploy it to your users?📖 Read
via "Security on TechRepublic".