❌ Safari Bug Revealed After Apple Takes Nearly a Year to Patch ❌
📖 Read
via "Threatpost".
Polish security researcher unveiled the flaw in a cross-browser sharing API that could allow attackers to steal user files.📖 Read
via "Threatpost".
Threat Post
Safari Bug Revealed After Apple Takes Nearly a Year to Patch
Polish security researcher unveiled the flaw in a cross-browser sharing API that could allow attackers to steal user files.
🛠 Sifter 9.5 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Sifter 9.5 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Falco 0.25.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Falco 0.25.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Palo Alto Networks to Acquire The Crypsis Group for $265M 🕴
📖 Read
via "Dark Reading: ".
This is the latest in a series of acquisitions that Palo Alto has made since 2018.📖 Read
via "Dark Reading: ".
Dark Reading
Palo Alto Networks to Acquire The Crypsis Group for $265M
This is the latest in a series of acquisitions that Palo Alto has made since 2018.
🕴 Three Easy Ways to Avoid Meow-like Database Attacks 🕴
📖 Read
via "Dark Reading: ".
The largest problem facing database security today is the disconnect between security teams and DBAs beginning from the moment of configuration and continuing throughout the database lifecycle.📖 Read
via "Dark Reading: ".
Dark Reading
Three Easy Ways to Avoid Meow-like Database Attacks
The largest problem facing database security today is the disconnect between security teams and DBAs beginning from the moment of configuration and continuing throughout the database lifecycle.
🔏 DOJ Discusses China's Efforts to Steal US IP 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
John Demers, the Justice Department's top national security official, said that 80% of state-connected espionage cases relate to China.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
DOJ Discusses China's Efforts to Steal US IP
John Demers, the Justice Department's top national security official, said that 80% of state-connected espionage cases relate to China.
🕴 Online Business Fraud Down, Consumer Fraud Up 🕴
📖 Read
via "Dark Reading: ".
Criminals are changing tactics to match changing business conditions in the coronavirus pandemic, according to a new report.📖 Read
via "Dark Reading: ".
Dark Reading
Online Business Fraud Down, Consumer Fraud Up
Criminals are changing tactics to match changing business conditions in the coronavirus pandemic, according to a new report.
🔐 How phishing attacks have exploited Amazon Web Services accounts 🔐
📖 Read
via "Security on TechRepublic".
Phishing campaigns could compromise business data and use Amazon's cloud platform to launch further attacks, says KnowBe4.📖 Read
via "Security on TechRepublic".
TechRepublic
How phishing attacks have exploited Amazon Web Services accounts
Phishing campaigns could compromise business data and use Amazon's cloud platform to launch further attacks, says KnowBe4.
🕴 Phishing Attack Used Box to Land in Victim Inboxes 🕴
📖 Read
via "Dark Reading: ".
A phishing attack targeting government and security organizations used a legitimate Box page with Microsoft 365 branding to trick victims.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading
🕴 Election Security's Sticky Problem: Attackers Who Don't Attack Votes 🕴
📖 Read
via "Dark Reading: ".
If election defenders are protecting votes, and adversaries are attacking something else entirely, both sides might claim success, "Operation BlackOut" simulation shows.📖 Read
via "Dark Reading: ".
Dark Reading
Election Security's Sticky Problem: Attackers Who Don't Attack Votes
If election defenders are protecting votes, and adversaries are attacking something else entirely, both sides might claim success, Operation BlackOut simulation shows.
❌ Four More Bugs Patched in Microsoft’s Azure Sphere IoT Platform ❌
📖 Read
via "Threatpost".
Researchers have unearthed more vulnerabilities in Microsoft’s IoT security solution.📖 Read
via "Threatpost".
Threat Post
Four More Bugs Patched in Microsoft’s Azure Sphere IoT Platform
Researchers have unearthed more vulnerabilities in Microsoft’s IoT security solution.
ATENTION‼ New - CVE-2019-14904
📖 Read
via "National Vulnerability Database".
A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the name of the zone and executing arbitrary commands in the remote host. Ansible Engine 2.7.15, 2.8.7, and 2.9.2 as well as previous versions are affected.📖 Read
via "National Vulnerability Database".
❌ How to Write a Cybersecurity Playbook During a Pandemic ❌
📖 Read
via "Threatpost".
IT teams have had to learn to be dynamic as workforces continue to shift strategies while COVID-19 drags on.📖 Read
via "Threatpost".
Threat Post
How to Write a Cybersecurity Playbook During a Pandemic
IT teams have had to learn to be dynamic as workforces continue to shift strategies while COVID-19 drags on.
❌ Medical Data Leaked on GitHub Due to Developer Errors ❌
📖 Read
via "Threatpost".
Up to 200,000 patient records from Office 365 and Google G Suite exposed by hardcoded credentials and other improper access controls.📖 Read
via "Threatpost".
Threat Post
Medical Data Leaked on GitHub Due to Developer Errors
Up to 200,000 patient records from Office 365 and Google G Suite exposed by hardcoded credentials and other improper access controls.
🕴 Deep Fake: Setting the Stage for Next-Gen Social Engineering 🕴
📖 Read
via "Dark Reading: ".
Humans are susceptible to normalcy bias, which may leave us vulnerable to disinformation that reinforces our beliefs.📖 Read
via "Dark Reading: ".
Dark Reading
Deep Fake: Setting the Stage for Next-Gen Social Engineering
Humans are susceptible to normalcy bias, which may leave us vulnerable to disinformation that reinforces our beliefs.
🔐 What a year of penetration testing data can reveal about the state of cybersecurity 🔐
📖 Read
via "Security on TechRepublic".
From web app flaws to a lack of 2FA, Rapid7 found lots of common soft targets in the networks it breached on behalf of clients.📖 Read
via "Security on TechRepublic".
TechRepublic
What a year of penetration testing data can reveal about the state of cybersecurity
From web app flaws to a lack of 2FA, Rapid7 found lots of common soft targets in the networks it breached on behalf of clients.
❌ Disinformation Spurs a Thriving Industry as U.S. Election Looms ❌
📖 Read
via "Threatpost".
Threat actors are becoming increasingly sophisticated in launching disinformation campaigns - and staying under the radar to avoid detection from Facebook, Twitter and other platforms.📖 Read
via "Threatpost".
Threat Post
Disinformation Spurs a Thriving Industry as U.S. Election Looms
Threat actors are becoming increasingly sophisticated in launching disinformation campaigns - and staying under the radar to avoid detection from Facebook, Twitter and other platforms.
🕴 With More Use of Cloud, Passwords Become Even Weaker Link 🕴
📖 Read
via "Dark Reading: ".
Slow patching provides vulnerabilities to exploit. A lack of network segmentation allows unrestricted lateral movement. Yet a report surveying a year of penetration tests finds that passwords still top the list of what attackers use to compromise systems.📖 Read
via "Dark Reading: ".
Dark Reading
With More Use of Cloud, Passwords Become Even Weaker Link
Slow patching provides vulnerabilities to exploit. A lack of network segmentation allows unrestricted lateral movement. Yet a report surveying a year of penetration tests finds that passwords still top the list of what attackers use to compromise systems.
🔐 Want to create loyal customers? Get on the bleeding edge of data security 🔐
📖 Read
via "Security on TechRepublic".
The public is increasingly wary of the privacy of their data. Companies reliant on it should take this as a sign of the future of customer loyalty, says data privacy firm Privitar.📖 Read
via "Security on TechRepublic".
TechRepublic
Want to create loyal customers? Get on the bleeding edge of data security
The public is increasingly wary of the privacy of their data. Companies reliant on it should take this as a sign of the future of customer loyalty, says data privacy firm Privitar.
🔐 Cybersecurity at a crossroads: Moving toward trust in our technologies 🔐
📖 Read
via "Security on TechRepublic".
Cloud computing changed the technology landscape forever. Here's hoping that trust will be the next frontier of computing.📖 Read
via "Security on TechRepublic".
TechRepublic
Cybersecurity at a crossroads: Moving toward trust in our technologies
Cloud computing changed the technology landscape forever. Here's hoping that trust will be the next frontier of computing.
ATENTION‼ New - CVE-2019-18847
📖 Read
via "National Vulnerability Database".
Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1.📖 Read
via "National Vulnerability Database".