🕴 Key Considerations & Best Practices for Establishing a Secure Remote Workforce 🕴
📖 Read
via "Dark Reading".
Cybersecurity is challenging but not paralyzing, and now is the moment to educate our employees to overcome these challenges.📖 Read
via "Dark Reading".
Dark Reading
Key Considerations & Best Practices for Establishing a Secure Remote Workforce
Cybersecurity is challenging but not paralyzing, and now is the moment to educate our employees to overcome these challenges.
‼ CVE-2020-25262 ‼
📖 Read
via "National Vulnerability Database".
PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-2289 ‼
📖 Read
via "National Vulnerability Database".
Jenkins Active Choices Plugin 2.4 and earlier does not escape the name and description of build parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-2296 ‼
📖 Read
via "National Vulnerability Database".
A cross-site request forgery (CSRF) vulnerability in Jenkins Shared Objects Plugin 0.44 and earlier allows attackers to configure shared objects.📖 Read
via "National Vulnerability Database".
🦿 Buyers beware: Hackers poised to make Amazon Prime Day into a prime phishing day 🦿
📖 Read
via "Tech Republic".
Analysis of hundreds of millions of web pages found phishing and fraudulent sites using the Amazon brand and logos poised for big Prime Day sales, according to Bolster Research.📖 Read
via "Tech Republic".
TechRepublic
Buyers beware: Hackers poised to make Amazon Prime Day into a prime phishing day
Analysis of hundreds of millions of web pages found phishing and fraudulent sites using the Amazon brand and logos poised for big Prime Day sales, according to Bolster Research.
❌ Microsoft Azure Flaws Open Admin Servers to Takeover ❌
📖 Read
via "Threat Post".
Two flaws in Microsoft's cloud-based Azure App Services could have allowed server-side forgery request (SSFR) and remote code-execution attacks.📖 Read
via "Threat Post".
Threat Post
Microsoft Azure Flaws Open Admin Servers to Takeover
Two flaws in Microsoft's cloud-based Azure App Services could have allowed server-side forgery request (SSFR) and remote code-execution attacks.
🕴 Kaspersky Researchers Spot Russia-on-Russia Cyber-Espionage Campaign 🕴
📖 Read
via "Dark Reading".
Steganography-borne malware used to spy on industrial targets in Russia.📖 Read
via "Dark Reading".
Dark Reading
Kaspersky Researchers Spot Russia-on-Russia Cyber-Espionage Campaign
Steganography-borne malware used to spy on industrial targets in Russia.
🕴 US Election-Related Websites Vulnerable to Fraud, Abuse 🕴
📖 Read
via "Dark Reading".
New research finds the vast majority of reputable news, political, and donor-oriented sites don't use registry locks.📖 Read
via "Dark Reading".
Dark Reading
US Election-Related Websites Vulnerable to Fraud, Abuse
New research finds the vast majority of reputable news, political, and donor-oriented sites don't use registry locks.
‼ CVE-2020-5389 ‼
📖 Read
via "National Vulnerability Database".
Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-13344 ‼
📖 Read
via "National Vulnerability Database".
An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authenticate as any user that has a session stored in Redis📖 Read
via "National Vulnerability Database".
🦿 Security pros: Cyber threats to industrial enterprises increase due to pandemic 🦿
📖 Read
via "Tech Republic".
86% polled said their organization made cybersecurity a priority during the COVID-19 crisis and implemented appropriate training for remote workers, according to a report.📖 Read
via "Tech Republic".
TechRepublic
Security pros: Cyber threats to industrial enterprises increase due to pandemic
86% polled said their organization made cybersecurity a priority during the COVID-19 crisis and implemented appropriate training for remote workers, according to a report.
⚠ Naked Security Podcast – we’re back for Series 3! ⚠
📖 Read
via "Naked Security".
Join us weekly for the Naked Security Podcast - back for Series 3 and available wherever good podcasts are found!📖 Read
via "Naked Security".
Naked Security
Naked Security Podcast – we’re back for Series 3!
Join us weekly for the Naked Security Podcast – back for Series 3 and available wherever good podcasts are found!
🛠 Zeek 3.2.2 🛠
📖 Read
via "Packet Storm Security".
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek has successfully bridged the traditional gap between academia and operations since its inception. Today, it is relied upon operationally in particular by many scientific environments for securing their cyber-infrastructure. Zeek's user community includes major universities, research labs, supercomputing centers, and open-science communities. This is the source code release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Zeek 3.2.2 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
⚠ 8 tips to tighten up your work-from-home network ⚠
📖 Read
via "Naked Security".
You don't have to be an IT guru to beef up your cybersecurity at home. Sometimes it's enough to ask yourself, "Which bits can I turn off?"📖 Read
via "Naked Security".
Naked Security
8 tips to tighten up your work‑from‑home network
You don’t have to be an IT guru to beef up your cybersecurity at home. Sometimes it’s enough to ask yourself, “Which bits can I turn off?”
❌ Cisco Fixes High-Severity Webex, Security Camera Flaws ❌
📖 Read
via "Threat Post".
Three high-severity flaws exist in Cisco's Webex video conferencing system, Cisco’s Video Surveillance 8000 Series IP Cameras and Identity Services Engine.📖 Read
via "Threat Post".
Threat Post
Cisco Fixes High-Severity Webex, Security Camera Flaws
Three high-severity flaws exist in Cisco's Webex video conferencing system, Cisco’s Video Surveillance 8000 Series IP Cameras and Identity Services Engine.
🦿 How SMBs can better protect their data from cyberattacks 🦿
📖 Read
via "Tech Republic".
SMBs compromised by an effective cyberattack can not only lose data and suffer financially but go out of business entirely, says Infrascale.📖 Read
via "Tech Republic".
TechRepublic
How SMBs can better protect their data from cyberattacks
SMBs compromised by an effective cyberattack can not only lose data and suffer financially but go out of business entirely, says Infrascale.
🕴 Scale Up Threat Hunting to Skill Up Analysts 🕴
📖 Read
via "Dark Reading".
Security operation centers need to move beyond the simplicity of good and bad software to having levels of "badness," as well as better defining what is good. Here's why.📖 Read
via "Dark Reading".
Dark Reading
Scale Up Threat Hunting to Skill Up Analysts
Security operation centers need to move beyond the simplicity of good and bad software to having levels of badness, as well as better defining what is good. Here's why.
‼ CVE-2020-10816 ‼
📖 Read
via "National Vulnerability Database".
Zoho ManageEngine Applications Manager 14780 and before allows a remote unauthenticated attacker to register managed servers via AAMRequestProcessor servlet.📖 Read
via "National Vulnerability Database".
🔏 What is HIPAA Compliance? 🔏
📖 Read
via "Digital Guardian".
Learn about the Health Insurance Portability and Accountability Act (HIPAA) and the requirements for HIPAA compliance in Data Protection 101, our series on the fundamentals of information security.📖 Read
via "Digital Guardian".
Digitalguardian
What is HIPAA Compliance?
Learn about the Health Insurance Portability and Accountability Act (HIPAA) and the requirements for HIPAA compliance in Data Protection 101, our series on the fundamentals of information security.
🦿 Cloud and remote work support strengthened US market performance 🦿
📖 Read
via "Tech Republic".
The IT outlook for 2021, top trends and guidance as the enterprise prepares for "the next normal," according to a new report from IDC.📖 Read
via "Tech Republic".
TechRepublic
Cloud and remote work support strengthened US market performance
The IT outlook for 2021, top trends and guidance as the enterprise prepares for "the next normal," according to a new report from IDC.
❌ RAINBOWMIX Apps in Google Play Serve Up Millions of Ad Fraud Victims ❌
📖 Read
via "Threat Post".
Collectively, 240 fraudulent Android apps -- masquerading as retro game emulators -- account for 14 million installs.📖 Read
via "Threat Post".
Threat Post
RAINBOWMIX Apps in Google Play Serve Up Millions of Ad Fraud Victims
Collectively, 240 fraudulent Android apps — masquerading as retro game emulators — account for 14 million installs.