🛠 Zeek 3.2.1 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek has successfully bridged the traditional gap between academia and operations since its inception. Today, it is relied upon operationally in particular by many scientific environments for securing their cyber-infrastructure. Zeek's user community includes major universities, research labs, supercomputing centers, and open-science communities.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Zeek 3.2.1 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks ❌
📖 Read
via "Threatpost".
The "BLURtooth" flaw allows attackers within wireless range to bypass authentication keys and snoop on devices utilizing implementations of Bluetooth 4.0 through 5.0.📖 Read
via "Threatpost".
Threat Post
Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks
The BLURtooth flaw allows attackers within wireless range to bypass authentication keys and snoop on devices utilizing implementations of Bluetooth 4.0 through 5.0.
🔐 How ransomware attacks are growing in severity 🔐
📖 Read
via "Security on TechRepublic".
Demands are sharply higher, and the complexity and costs of addressing an attack are increasing, according to cyber insurance provider Coalition.📖 Read
via "Security on TechRepublic".
TechRepublic
How ransomware attacks are growing in severity
Demands are sharply higher, and the complexity and costs of addressing an attack are increasing, according to cyber insurance provider Coalition.
🕴 Managed IT Providers: The Cyber-Threat Actors' Gateway to SMBs 🕴
📖 Read
via "Dark Reading: ".
Criminals have made MSPs a big target of their attacks. That should concern small and midsize businesses a great deal.📖 Read
via "Dark Reading: ".
Dark Reading
Managed IT Providers: The Cyber-Threat Actors' Gateway to SMBs
Criminals have made MSPs a big target of their attacks. That should concern small and midsize businesses a great deal.
🕴 Think You're Spending Enough on Security? 🕴
📖 Read
via "Dark Reading: ".
While the amount will vary from organization to organization, here are four ways for everyone to evaluate whether they're allocating the right amount of money and resources.📖 Read
via "Dark Reading: ".
Dark Reading
Think You're Spending Enough on Security?
While the amount will vary from organization to organization, here are four ways for everyone to evaluate whether they're allocating the right amount of money and resources.
🔏 How to Mitigate a DDoS Attack 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Following a rash of targeted denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks worldwide, countries are offering guidance.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
How to Mitigate a DDoS Attack
Following a rash of targeted denial-of-service (DoS) and distributed denial-of-service (DDoS) attacks worldwide, countries are offering guidance.
ATENTION‼ New - CVE-2018-17145
📖 Read
via "National Vulnerability Database".
Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.📖 Read
via "National Vulnerability Database".
🕴 Zoom Brings Two-Factor Authentication to All Users 🕴
📖 Read
via "Dark Reading: ".
This marks the latest step Zoom has taken to improve user security as more employees work from home.📖 Read
via "Dark Reading: ".
Dark Reading
Zoom Brings Two-Factor Authentication to All Users
This marks the latest step Zoom has taken to improve user security as more employees work from home.
🔐 How to manage app permissions in Android 11 🔐
📖 Read
via "Security on TechRepublic".
With your Android device upgraded to version 11, you'll want to get control of app permissions. Jack Wallen shows you how.📖 Read
via "Security on TechRepublic".
TechRepublic
How to manage app permissions in Android 11
With your Android device upgraded to version 11, you'll want to get control of app permissions. Jack Wallen shows you how.
❌ Razer Gaming Fans Caught Up in Data Leak ❌
📖 Read
via "Threatpost".
A cloud misconfiguration at the gaming-gear merchant potentially exposed 100,000 customers to phishing and fraud.📖 Read
via "Threatpost".
Threat Post
Razer Gaming Fans Caught Up in Data Leak
A cloud misconfiguration at the gaming-gear merchant potentially exposed 100,000 customers to phishing and fraud.
❌ Microsoft Warns of Cyberattacks on Trump, Biden Election Campaigns ❌
📖 Read
via "Threatpost".
Just months before the U.S. presidential election, hackers from Russia, China and Iran are ramping up phishing and malware attacks against campaign staffers.📖 Read
via "Threatpost".
Threat Post
Microsoft Warns of Cyberattacks on Trump, Biden Election Campaigns
Just months before the U.S. presidential election, hackers from Russia, China and Iran are ramping up phishing and malware attacks against campaign staffers.
🕴 ThreatConnect Buys Nehemiah Security 🕴
📖 Read
via "Dark Reading: ".
Threat intelligence firm adds Nehemiah's Risk Quantifier to its platform.📖 Read
via "Dark Reading: ".
Dark Reading
ThreatConnect Buys Nehemiah Security
Threat intelligence firm adds Nehemiah's Risk Quantifier to its platform.
🕴 6 Lessons IT Security Can Learn From DevOps 🕴
📖 Read
via "Dark Reading: ".
DevOps has taken over enterprise software development. The discipline has lessons for IT security -- here are a quick half-dozen.📖 Read
via "Dark Reading: ".
Dark Reading
6 Lessons IT Security Can Learn From DevOps
DevOps has taken over enterprise software development. The discipline has lessons for IT security -- here are a quick half-dozen.
🕴 Two Years on from GDPR: Has It Driven Growth in Cybersecurity Insurance? 🕴
📖 Read
via "Dark Reading: ".
Whilst GDPR has put the spotlight on data privacy and cyber issues, there are other more prominent trends that are driving a greater take-up of cyber insurance, says Ben Maidment, Class Underwriter - Cyber, Physical & Technology at Brit Insurance.📖 Read
via "Dark Reading: ".
Dark Reading
Two Years on from GDPR: Has It Driven Growth in Cybersecurity Insurance?
Whilst GDPR has put the spotlight on data privacy and cyber issues, there are other more prominent trends that are driving a greater take-up of cyber insurance, says Ben Maidment, Class Underwriter - Cyber, Physical & Technology at Brit Insurance.
🕴 US Sanctions Russian Attackers for 2020 Election Interference 🕴
📖 Read
via "Dark Reading: ".
The move comes as Microsoft publishes research on attack groups and activity attempting to target the Biden and Trump campaigns.📖 Read
via "Dark Reading: ".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
🕴 Cyber-Risks Explode With Move to Telehealth Services 🕴
📖 Read
via "Dark Reading: ".
The hasty shift to online delivery of primary care services since the COVID-19 outbreak has attracted significant attacker interest.📖 Read
via "Dark Reading: ".
Dark Reading
Cyber-Risks Explode With Move to Telehealth Services
The hasty shift to online delivery of primary care services since the COVID-19 outbreak has attracted significant attacker interest.
ATENTION‼ New - CVE-2014-1420
📖 Read
via "National Vulnerability Database".
On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the O_EXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by symlink and hardlink restrictions in Ubuntu. Fixed in 1.1.1188+14.10.20140813.4-0ubuntu1.📖 Read
via "National Vulnerability Database".
🕴 Fraud Prevention During the Pandemic 🕴
📖 Read
via "Dark Reading: ".
When the economy is disrupted, fraud goes up, so let's not ignore the lessons we can learn from previous downturns.📖 Read
via "Dark Reading: ".
Dark Reading
Fraud Prevention During the Pandemic
When the economy is disrupted, fraud goes up, so let's not ignore the lessons we can learn from previous downturns.
🔏 Friday Five 9/11 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
Initial access brokers, scam domain names, and Brazil's new data protection law - catch up on the week's news with the Friday Five.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Friday Five 9/11
Initial access brokers, scam domain names, and Brazil's new data protection law - catch up on the week's news with the Friday Five.
⚠ Serious Security: Hacking Windows passwords via your wallpaper ⚠
📖 Read
via "Naked Security".
Themes and wallpapers - how dangerous can they really be?📖 Read
via "Naked Security".
Naked Security
Serious Security: Hacking Windows passwords via your wallpaper
Themes and wallpapers – how dangerous can they really be?
🕴 Spear-Phishers Leverage Office 365 Ecosystem to Validate Stolen Creds in Real Time 🕴
📖 Read
via "Dark Reading: ".
New attack technique uses Office 365 APIs to cross-check credentials against Azure Active Directory as victim types them in.📖 Read
via "Dark Reading: ".
Dark Reading
Spear-Phishers Leverage Office 365 Ecosystem to Validate Stolen Creds in Real Time
New attack technique uses Office 365 APIs to cross-check credentials against Azure Active Directory as victim types them in.