❌ Google Squashes Critical Android Media Framework Bug ❌
📖 Read
via "Threatpost".
The September Android security bulletin addressed critical- and high-severity flaws tied to 53 CVEs overall.📖 Read
via "Threatpost".
Threat Post
Google Squashes Critical Android Media Framework Bug
The September Android security bulletin addressed critical- and high-severity flaws tied to 53 CVEs overall.
❌ Zeppelin Ransomware Returns with New Trojan on Board ❌
📖 Read
via "Threatpost".
The malware has popped up in a targeted campaign and a new infection routine.📖 Read
via "Threatpost".
Threat Post
Zeppelin Ransomware Returns with New Trojan on Board
The malware has popped up in a targeted campaign and a new infection routine.
🕴 Inova Suffers Third-Party Data Breach 🕴
📖 Read
via "Dark Reading: ".
The breach occurred as part of a ransomware attack against service provider Blackbaud.📖 Read
via "Dark Reading: ".
Dark Reading
Inova Suffers Third-Party Data Breach
The breach occurred as part of a ransomware attack against service provider Blackbaud.
🕴 Chart: Does Lack of Diversity Impact the Skills Shortage? 🕴
📖 Read
via "Dark Reading: ".
Yes, according to 21% of security pros who participated in the 2020 Black Hat Attendee Survey.📖 Read
via "Dark Reading: ".
Dark Reading
Chart: Does Lack of Diversity Impact the Skills Shortage?
Yes, according to 21% of security pros who participated in the 2020 Black Hat Attendee Survey.
🕴 Meet the Middlemen Who Connect Cybercriminals With Victims 🕴
📖 Read
via "Dark Reading: ".
An analysis of initial access brokers explains how they break into vulnerable organizations and sell their access for up to $10,000.📖 Read
via "Dark Reading: ".
Dark Reading
Meet the Middlemen Who Connect Cybercriminals With Victims
An analysis of initial access brokers explains how they break into vulnerable organizations and sell their access for up to $10,000.
🕴 Legality of Security Research to be Decided in US Supreme Court Case 🕴
📖 Read
via "Dark Reading: ".
A ruling that a police officer's personal use of a law enforcement database is "hacking" has security researchers worried for the future.📖 Read
via "Dark Reading: ".
Dark Reading
Legality of Security Research to be Decided in US Supreme Court Case
A ruling that a police officer's personal use of a law enforcement database is hacking has security researchers worried for the future.
🕴 Ransomware Attacks Disrupt School Reopenings 🕴
📖 Read
via "Dark Reading: ".
A flurry of recent attacks is complicating attempts to deliver classes online at some schools in different parts of the country.📖 Read
via "Dark Reading: ".
Dark Reading
Ransomware Attacks Disrupt School Reopenings
A flurry of recent attacks is complicating attempts to deliver classes online at some schools in different parts of the country.
❌ CDRThief Malware Targets VoIP Gear in Carrier Networks ❌
📖 Read
via "Threatpost".
The Linux-targeted code can steal phone-call metadata, likely in spy campaigns or for use in VoIP fraud.📖 Read
via "Threatpost".
Threat Post
CDRThief Malware Targets VoIP Gear in Carrier Networks
The Linux-targeted code can steal phone-call metadata, likely in spy campaigns or for use in VoIP fraud.
🔐 Linux servers and workstations are hackers' next target, security researchers warn 🔐
📖 Read
via "Security on TechRepublic".
Sophisticated hackers and crooks are developing more tools to target Linux-based systems used by government and big business.📖 Read
via "Security on TechRepublic".
TechRepublic
Linux servers and workstations are hackers' next target, security researchers warn
Sophisticated hackers and crooks are developing more tools to target Linux-based systems used by government and big business.
❌ Product Overview: Cynet Takes Cyber Threat Protection Automation to the Next Level with Incident Engine ❌
📖 Read
via "Threatpost".
The Cynet 360 platform is built on three pillars; Extended Detection and Response (XDR), Response Automation, and Managed Detection and Response (MDR).📖 Read
via "Threatpost".
Threat Post
Product Overview: Cynet Takes Cyber Threat Protection Automation to the Next Level with Incident Engine
The Cynet 360 platform is built on three pillars; Extended Detection and Response (XDR), Response Automation, and Managed Detection and Response (MDR).
❌ Govt.-Backed Contact-Tracing Apps Raise Privacy Hackles ❌
📖 Read
via "Threatpost".
New opt-in COVID-19 Exposure Notifications Express systems baked into Apple’s iOS and available on Android need privacy guardrails, say privacy advocates.📖 Read
via "Threatpost".
Threat Post
Govt.-Backed Contact-Tracing Apps Raise Privacy Hackles
New opt-in COVID-19 Exposure Notifications Express systems baked into Apple’s iOS and available on Android need privacy guardrails, say privacy advocates.
🕴 Ripple20 Malware Highlights Industrial Security Challenges 🕴
📖 Read
via "Dark Reading: ".
Poor security practices allowed software vulnerabilities to propagate throughout industrial and IoT products for more than 20 years.📖 Read
via "Dark Reading: ".
Dark Reading
Ripple20 Malware Highlights Industrial Security Challenges
Poor security practices allowed software vulnerabilities to propagate throughout industrial and IoT products for more than 20 years.
❌ Ransomware And Zoom-Bombing: Cyberattacks Disrupt Back-to-School Plans ❌
📖 Read
via "Threatpost".
Cyberattacks have caused several school systems to delay students' first day back - and experts warn that new COVID-related delays could be the new "snow days."📖 Read
via "Threatpost".
Threat Post
Ransomware And Zoom-Bombing: Cyberattacks Disrupt Back-to-School Plans
Cyberattacks have caused several school systems to delay students' first day back - and experts warn that new COVID-related delays could be the new "snow days."
🛠 Zeek 3.2.1 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek has successfully bridged the traditional gap between academia and operations since its inception. Today, it is relied upon operationally in particular by many scientific environments for securing their cyber-infrastructure. Zeek's user community includes major universities, research labs, supercomputing centers, and open-science communities.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Zeek 3.2.1 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks ❌
📖 Read
via "Threatpost".
The "BLURtooth" flaw allows attackers within wireless range to bypass authentication keys and snoop on devices utilizing implementations of Bluetooth 4.0 through 5.0.📖 Read
via "Threatpost".
Threat Post
Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks
The BLURtooth flaw allows attackers within wireless range to bypass authentication keys and snoop on devices utilizing implementations of Bluetooth 4.0 through 5.0.
🔐 How ransomware attacks are growing in severity 🔐
📖 Read
via "Security on TechRepublic".
Demands are sharply higher, and the complexity and costs of addressing an attack are increasing, according to cyber insurance provider Coalition.📖 Read
via "Security on TechRepublic".
TechRepublic
How ransomware attacks are growing in severity
Demands are sharply higher, and the complexity and costs of addressing an attack are increasing, according to cyber insurance provider Coalition.
🕴 Managed IT Providers: The Cyber-Threat Actors' Gateway to SMBs 🕴
📖 Read
via "Dark Reading: ".
Criminals have made MSPs a big target of their attacks. That should concern small and midsize businesses a great deal.📖 Read
via "Dark Reading: ".
Dark Reading
Managed IT Providers: The Cyber-Threat Actors' Gateway to SMBs
Criminals have made MSPs a big target of their attacks. That should concern small and midsize businesses a great deal.
🕴 Think You're Spending Enough on Security? 🕴
📖 Read
via "Dark Reading: ".
While the amount will vary from organization to organization, here are four ways for everyone to evaluate whether they're allocating the right amount of money and resources.📖 Read
via "Dark Reading: ".
Dark Reading
Think You're Spending Enough on Security?
While the amount will vary from organization to organization, here are four ways for everyone to evaluate whether they're allocating the right amount of money and resources.
🔏 How to Mitigate a DDoS Attack 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Following a rash of targeted denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks worldwide, countries are offering guidance.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
How to Mitigate a DDoS Attack
Following a rash of targeted denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks worldwide, countries are offering guidance.
ATENTION‼ New - CVE-2018-17145
📖 Read
via "National Vulnerability Database".
Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.📖 Read
via "National Vulnerability Database".
🕴 Zoom Brings Two-Factor Authentication to All Users 🕴
📖 Read
via "Dark Reading: ".
This marks the latest step Zoom has taken to improve user security as more employees work from home.📖 Read
via "Dark Reading: ".
Dark Reading
Zoom Brings Two-Factor Authentication to All Users
This marks the latest step Zoom has taken to improve user security as more employees work from home.