🔏 Ransomware Reportedly Behind Nationwide UHS Hospital Outage 🔏
📖 Read
via "Digital Guardian".
The full scope of the incident isn't yet known but as a result, many facilities have been left without access to computer systems.📖 Read
via "Digital Guardian".
Digital Guardian
Ransomware Reportedly Behind Nationwide UHS Hospital Outage
The full scope of the incident isn't yet known but as a result, many facilities have been left without access to computer systems.
❌ Mac, Linux Users Now Targeted by FinSpy Variants ❌
📖 Read
via "Threat Post".
FinSpy has returned in new campaigns targeting dissident organizations in Egypt - and researchers uncovered new samples of the spyware targeting macOS and Linux users.📖 Read
via "Threat Post".
Threat Post
Mac, Linux Users Now Targeted by FinSpy Variants
FinSpy has returned in new campaigns targeting dissident organizations in Egypt – and researchers uncovered new samples of the spyware targeting macOS and Linux users.
❌ Windows 7 ‘Upgrade’ Emails Steal Outlook Credentials ❌
📖 Read
via "Threat Post".
Researchers warn of emails pretending to help business employees upgrade to Windows 10 - and then stealing their Outlook emails and passwords.📖 Read
via "Threat Post".
Threat Post
Windows 7 ‘Upgrade’ Emails Steal Outlook Credentials
Researchers warn of emails pretending to help business employees upgrade to Windows 10 - and then stealing their Outlook emails and passwords.
🦿 How companies can meet the needs of the future workforce 🦿
📖 Read
via "Tech Republic".
The workforce is changing in the wake of a global pandemic. Learn some insights from industry executives about what companies and employees should be doing to evolve accordingly.📖 Read
via "Tech Republic".
TechRepublic
How companies can meet the needs of the future workforce
The workforce is changing in the wake of a global pandemic. Learn some insights from industry executives about what companies and employees should be doing to evolve accordingly.
🕴 Ivanti Acquires Two Security Companies 🕴
📖 Read
via "Dark Reading".
Purchase of MobilIron and Pulse Secure announced simultaneously.📖 Read
via "Dark Reading".
Dark Reading
Ivanti Acquires Two Security Companies
Purchase of MobilIron and Pulse Secure announced simultaneously.
‼ CVE-2020-25770 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25771.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-24565 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installations of the product. An attacker must first obtain the ability to execute low-privileged code on the target in order to exploit these vulnerabilities. The subs affected in this vulnerability makes it unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25770.📖 Read
via "National Vulnerability Database".
❌ Telehealth Poll: How Risky Are Remote Doctor Visits? ❌
📖 Read
via "Threat Post".
Threatpost's latest poll probes telehealth security risks and asks for IT cures.📖 Read
via "Threat Post".
Threat Post
Telehealth Poll: How Risky Are Remote Doctor Visits?
Threatpost's latest poll probes telehealth security risks and asks for IT cures.
🕴 The Shared Irresponsibility Model in the Cloud Is Putting You at Risk 🕴
📖 Read
via "Dark Reading".
Step up, put the architecture and organization in place, and take responsibility. If you don't, who will?📖 Read
via "Dark Reading".
Dark Reading
The Shared Irresponsibility Model in the Cloud Is Putting You at Risk
Step up, put the architecture and organization in place, and take responsibility. If you don't, who will?
🕴 State-Sponsored Groups Increasingly Use Cloud & Open Source Infrastructure 🕴
📖 Read
via "Dark Reading".
Microsoft shuts down Azure Active Directory instances used by attackers to evade detection and warns that the use of open source tools by espionage groups is growing.📖 Read
via "Dark Reading".
Darkreading
State-Sponsored Hacking Groups Increasingly Use Cloud & Open Source Infrastructure
Microsoft shuts down Azure Active Directory instances used by attackers to evade detection and warns that the use of open source tools by espionage groups is growing.
❌ Las Vegas Students’ Personal Data Leaked, Post-Ransomware Attack ❌
📖 Read
via "Threat Post".
A researcher said he discovered an open data cache with names, grades, birthdates and more, after the Clark County School District refused to pay the ransom.📖 Read
via "Threat Post".
Threat Post
Las Vegas Students’ Personal Data Leaked, Post-Ransomware Attack
A researcher said he discovered an open data cache with names, grades, birthdates and more, after the Clark County School District refused to pay the ransom.
🦿 How to handle security risks in a hybrid work environment 🦿
📖 Read
via "Tech Republic".
Half of the organizations surveyed by Tessian were hit by a security incident while employees were working remotely. Here are some tips for mitigation.📖 Read
via "Tech Republic".
TechRepublic
How to handle security risks in a hybrid work environment
Half of the organizations surveyed by Tessian were hit by a security incident while employees were working remotely. Here are some tips for mitigation.
‼ CVE-2020-4607 ‼
📖 Read
via "National Vulnerability Database".
IBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local user to bypass security restrictions due to improper input validation. IBM X-Force ID: 184884.📖 Read
via "National Vulnerability Database".
❌ The Network Perimeter: This Time, It’s Personal ❌
📖 Read
via "Threat Post".
Botnets and IoT devices are forming a perfect storm for IT staff wrestling with WFH employee security.📖 Read
via "Threat Post".
Threat Post
The Network Perimeter: This Time, It’s Personal
Botnets and IoT devices are forming a perfect storm for IT staff wrestling with WFH employee security.
🕴 Shifting Left of Left: Why Secure Code Isn't Always Quality Code 🕴
📖 Read
via "Dark Reading".
Enabling engineers to share responsibility for security and empowering them to erase common vulnerabilities are good starting points.📖 Read
via "Dark Reading".
Dark Reading
Shifting Left of Left: Why Secure Code Isn't Always Quality Code
Enabling engineers to share responsibility for security and empowering them to erase common vulnerabilities are good starting points.
❌ Zerologon Attacks Against Microsoft DCs Snowball in a Week ❌
📖 Read
via "Threat Post".
The attempted compromises, which could allow full control over Active Directory identity services, are flying thick and fast just a week after active exploits of CVE-2020-1472 were first flagged.📖 Read
via "Threat Post".
Threat Post
Zerologon Attacks Against Microsoft DCs Snowball in a Week
The attempted compromises, which could allow full control over Active Directory identity services, are flying thick and fast just a week after active exploits of CVE-2020-1472 were first flagged.
‼ CVE-2020-15216 ‼
📖 Read
via "National Vulnerability Database".
In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxmldsig should upgrade to at least revision f6188febf0c29d7ffe26a0436212b19cb9615e64 or version 1.1.0📖 Read
via "National Vulnerability Database".
🔏 Ahead of Election, FBI, CISA Issue Warning on Disinformation Campaigns 🔏
📖 Read
via "Digital Guardian".
The FBI and CISA have issued another warning about the 2020 election, asserting that foreign actors are spreading disinformation around hacked voter information.📖 Read
via "Digital Guardian".
Digital Guardian
Ahead of Election, FBI, CISA Issue Warning on Disinformation Campaigns
The FBI and CISA has issued another warning about the 2020 election, asserting that foreign actors will spread disinformation around hacked voter information.
🕴 Vulnerability in Wireless Router Chipsets Prompts Advisory 🕴
📖 Read
via "Dark Reading".
Synopsys issues an advisory for vulnerabilities affecting the chipsets of wireless routers from Qualcomm, Mediatek, and Realtek.📖 Read
via "Dark Reading".
Dark Reading
Vulnerability in Wireless Router Chipsets Prompts Advisory
Synopsys issues an advisory for vulnerabilities affecting the chipsets of wireless routers from Qualcomm, Mediatek, and Realtek.
🦿 FBI says hackers want to stoke doubt about the 2020 election 🦿
📖 Read
via "Tech Republic".
In a PSA on Monday, the FBI and CISA warned about the potential for widespread disinformation campaigns in the run-up to November.📖 Read
via "Tech Republic".
TechRepublic
FBI says hackers want to stoke doubt about the 2020 election
In a PSA on Monday, the FBI and CISA warned about the potential for widespread disinformation campaigns in the run-up to November.
🕴 Securing Slack: 5 Tips for Safer Messaging, Collaboration 🕴
📖 Read
via "Dark Reading".
Remote workers and scattered teams are relying on Slack more and more for messaging and collaboration. Here are a few extra tips for keeping data and systems more secure when using Slack.📖 Read
via "Dark Reading".
Dark Reading
Securing Slack: 5 Tips for Safer Messaging, Collaboration
Remote workers and scattered teams are relying on Slack more and more for messaging and collaboration. Here are a few extra tips for keeping data and systems more secure when using Slack.