🔏 Friday Five: 7/31 Edition 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The FBI warns of new DDoS attack vectors, iOS14 allows unexpected prying behavior on Instagram, and NCSC research reveals the cybersecurity sector needs improvement in inclusion - catch up on all the week's news with the Friday Five.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five: 7/31 Edition
The FBI warns of new DDoS attack vectors, iOS14 allows unexpected prying behavior on Instagram, and NCSC research reveals the cybersecurity sector needs improvement in inclusion - catch up on all the week's news with the Friday Five.
🔐 Security analysts: Industry has not solved the talent gap or provided clear career paths 🔐
📖 Read
via "Security on TechRepublic".
New survey finds that cybersecurity professionals want more training to keep up with the threat landscape and learn new software platforms.📖 Read
via "Security on TechRepublic".
TechRepublic
Security analysts: Industry has not solved the talent gap or provided clear career paths
New survey finds that cybersecurity professionals want more training to keep up with the threat landscape and learn new software platforms.
🔐 Top 10 apps every iOS user should download 🔐
📖 Read
via "Security on TechRepublic".
Check out a developer's picks of 10 essential iOS apps, which focus on security, productivity, and more.📖 Read
via "Security on TechRepublic".
TechRepublic
10 Essential iOS Apps
Check out a developer's picks of 10 essential iOS apps, which focus on security, productivity, and more.
🛠 Sifter 9.01 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Sifter 9.01 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ Authorities Arrest Alleged 17-Year-Old ‘Mastermind’ Behind Twitter Hack ❌
📖 Read
via "Threatpost".
Three have been charged in alleged connection with the recent high-profile Twitter hack - including a 17-year-old teen from Florida who is the reported "mastermind" behind the attack.📖 Read
via "Threatpost".
Threat Post
Authorities Arrest Alleged 17-Year-Old ‘Mastermind’ Behind Twitter Hack
Three have been charged in alleged connection with the recent high-profile Twitter hack - including a 17-year-old teen from Florida who is the reported "mastermind" behind the attack.
⚠ Travel company CWT avoids ransomware derailment by paying $4.5m blackmail demand ⚠
📖 Read
via "Naked Security".
US travel company CWT has reportedly coughed up $4.5m to ransomware crooks who stole data and scrambled files.📖 Read
via "Naked Security".
Naked Security
Travel company CWT avoids ransomware derailment by paying $4.5m blackmail demand
US travel company CWT has reportedly coughed up $4.5m to ransomware crooks who stole data and scrambled files.
🕴 3 Arrested for Massive Twitter Breach 🕴
📖 Read
via "Dark Reading: ".
Three individuals aged 17, 19, and 22 have been charged for their alleged roles in the massive July 15 Twitter attack.📖 Read
via "Dark Reading: ".
Dark Reading
3 Arrested for Massive Twitter Breach
Three individuals aged 17, 19, and 22 have been charged for their alleged roles in the massive July 15 Twitter attack.
❌ 4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users ❌
📖 Read
via "Threatpost".
The flaws have been confirmed by Grandstream, but no firmware update has yet been issued.📖 Read
via "Threatpost".
Threat Post
4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users
The flaws have been confirmed by Grandstream, but no firmware update has yet been issued.
ATENTION‼ New - CVE-2019-11286
📖 Read
via "National Vulnerability Database".
VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2, contain a JMX service available to the network which does not properly restrict input. A remote authenticated malicious user may request against the service with a crafted set of credentials leading to remote code execution.📖 Read
via "National Vulnerability Database".
⚠ Twitter hack – three suspects charged in the US ⚠
📖 Read
via "Naked Security".
Three people have been fingered for the recent Twitter hack in which 45 high-profle accounts were taken over.📖 Read
via "Naked Security".
Naked Security
Twitter hack – three suspects charged in the US
Three people have been fingered for the recent Twitter hack in which 45 high-profle accounts were taken over.
⚠ Monday review – our recent stories revisited ⚠
📖 Read
via "Naked Security".
Get yourself up to date with everything we've written in the last seven days - it's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – our recent stories revisited
Get yourself up to date with everything we've written in the last seven days – it's weekly roundup time.
🕴 How Should I Securely Destroy/Discard My Devices? 🕴
📖 Read
via "Dark Reading: ".
While it is possible to do data destruction in-house, doing it correctly and at scale can be tedious.📖 Read
via "Dark Reading: ".
Dark Reading
How Should I Securely Destroy/Discard My Devices?
While it is possible to do data destruction in-house, doing it correctly and at scale can be tedious.
❌ Meetup Critical Flaws Allow ‘Group’ Takeover, Payment Theft ❌
📖 Read
via "Threatpost".
Researchers disclosed critical flaws in the popular Meetup service at Black Hat USA 2020 this week, which could allow takeover of Meetup "Groups."📖 Read
via "Threatpost".
Threat Post
Meetup Critical Flaws Allow ‘Group’ Takeover, Payment Theft
Researchers disclosed critical flaws in the popular Meetup service at Black Hat USA 2020 this week, which could allow takeover of Meetup "Groups."
🕴 A Patriotic Solution to the Cybersecurity Skills Shortage 🕴
📖 Read
via "Dark Reading: ".
Why now is the right time for the security industry to invest in the human capital that will make technology better, smarter, and safer.📖 Read
via "Dark Reading: ".
Dark Reading
A Patriotic Solution to the Cybersecurity Skills Shortage
Why now is the right time for the security industry to invest in the human capital that will make technology better, smarter, and safer.
ATENTION‼ New - CVE-2019-4589
📖 Read
via "National Vulnerability Database".
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user. IBM X-Force ID: 167449.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-4366
📖 Read
via "National Vulnerability Database".
IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748.📖 Read
via "National Vulnerability Database".
🔐 BlackBerry launches free tool for reverse engineering to fight cybersecurity attacks 🔐
📖 Read
via "Security on TechRepublic".
One of the first announcements at BlackHat USA 2020 is an open-source tool to fight malware that BlackBerry first used internally and is now making available to everyone.📖 Read
via "Security on TechRepublic".
TechRepublic
BlackBerry launches free tool for reverse engineering to fight cybersecurity attacks
One of the first announcements at BlackHat USA 2020 is an open-source tool to fight malware that BlackBerry first used internally and is now making available to everyone.
🔐 How to better protect your organization against mobile threats 🔐
📖 Read
via "Security on TechRepublic".
The increased use of personal phones for work and the growth of mobile malware create a risk to organizations, says Gigamon.📖 Read
via "Security on TechRepublic".
TechRepublic
How to better protect your organization against mobile threats
The increased use of personal phones for work and the growth of mobile malware create a risk to organizations, says Gigamon.
❌ Black Hat USA 2020: Critical Meetup.com Flaws Reveal Common AppSec Holes ❌
📖 Read
via "Threatpost".
With Black Hat USA 2020 kicking off this week, Erez Yalon with Checkmarx talks about newly disclosed, critical vulnerabilities in Meetup.com - and why they are the "holy grail" for attackers.📖 Read
via "Threatpost".
Threat Post
Black Hat USA 2020: Critical Meetup.com Flaws Reveal Common AppSec Holes
With Black Hat USA 2020 kicking off this week, Erez Yalon with Checkmarx talks about newly disclosed, critical vulnerabilities in Meetup.com - and why they are the "holy grail" for attackers.
🕴 Travel Management Firm CWT Pays $4.5M to Ransomware Attackers 🕴
📖 Read
via "Dark Reading: ".
Attackers claimed to steal two terabytes of files including financial reports, security files, and employees' personal data.📖 Read
via "Dark Reading: ".
Dark Reading
Travel Management Firm CWT Pays $4.5M to Ransomware Attackers
Attackers claimed to steal two terabytes of files including financial reports, security files, and employees' personal data.