❌ Office 365: A Favorite for Cyberattack Persistence ❌
📖 Read
via "Threat Post".
Bad actors are leveraging legitimate services and tools within Microsoft's productivity suite to launch cyberattacks on COVID-19 stay-at-home workers, new research finds.📖 Read
via "Threat Post".
Threat Post
Office 365: A Favorite for Cyberattack Persistence
Bad actors are leveraging legitimate services and tools within Microsoft's productivity suite to launch cyberattacks on COVID-19 stay-at-home workers, new research finds.
🕴 Online Voting Is Coming, but How Secure Will It Be? 🕴
📖 Read
via "Dark Reading".
It's time for state governments to act as leaders, adopt digital ID standards, enable new online voting systems, and provide broad-based access to all communities for the benefit of all.📖 Read
via "Dark Reading".
Dark Reading
Online Voting Is Coming, but How Secure Will It Be?
It's time for state governments to act as leaders, adopt digital ID standards, enable new online voting systems, and provide broad-based access to all communities for the benefit of all.
❌ TrickBot Takedown Disrupts Major Crimeware Apparatus ❌
📖 Read
via "Threat Post".
Microsoft and partners went after the botnet using a copyright infringement tactic and hunting down C2 servers.📖 Read
via "Threat Post".
Threat Post
TrickBot Takedown Disrupts Major Crimeware Apparatus
Microsoft and partners went after the botnet using a copyright infringement tactic and hunting down C2 servers.
🦿 Cybercriminals use stolen data and hacking tools as prizes in poker games and rap battles 🦿
📖 Read
via "Tech Republic".
Prizes for bad actors can be access to stolen data and tools to make hacks easier, according to new research from Trend Micro.📖 Read
via "Tech Republic".
TechRepublic
Cybercriminals use stolen data and hacking tools as prizes in poker games and rap battles
Prizes for bad actors can be access to stolen data and tools to make hacks easier, according to new research from Trend Micro.
‼ CVE-2020-16124 ‼
📖 Read
via "National Vulnerability Database".
Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic and prior versions. Fixed in https://github.com/ros/ros_comm/pull/2065.📖 Read
via "National Vulnerability Database".
❌ Election Systems Under Attack via Microsoft Zerologon Exploits ❌
📖 Read
via "Threat Post".
Cybercriminals are chaining Microsoft's Zerologon flaw with other exploits in order to infiltrate government systems, putting election systems at risk, a new CISA and FBI advisory warns.📖 Read
via "Threat Post".
Threat Post
Election Systems Under Attack via Microsoft Zerologon Exploits
Cybercriminals are chaining Microsoft's Zerologon flaw with other exploits in order to infiltrate government systems, putting election systems at risk, a new CISA and FBI advisory warns.
🦿 How to improve the cybersecurity of your remote workers 🦿
📖 Read
via "Tech Republic".
Cyberattacks against businesses have spiked since the shift to remote work began in early 2020, says Keeper Security.📖 Read
via "Tech Republic".
TechRepublic
How to improve the cybersecurity of your remote workers
Cyberattacks against businesses have spiked since the shift to remote work began in early 2020, says Keeper Security.
⚠ Creepy covert camera “feature” found in popular smartwatch for kids ⚠
📖 Read
via "Naked Security".
This popular smartwatch aimed at kids had a backdoor that received covert encrypted commands via SMS.📖 Read
via "Naked Security".
Naked Security
Creepy covert camera “feature” found in popular smartwatch for kids
This popular smartwatch aimed at kids had a backdoor that received covert encrypted commands via SMS.
🕴 Trickbot Botnet Response Highlights Partnerships Preventing U.S. Election Interference 🕴
📖 Read
via "Dark Reading".
Recent efforts by USCYBERCOM and Microsoft to disrupt the Trickbot botnet highlight the importance of partnerships in successful malware botnet disruption.📖 Read
via "Dark Reading".
Dark Reading
Omdia
❌ Critical Flash Player Flaw Opens Adobe Users to RCE ❌
📖 Read
via "Threat Post".
The flaw stems from a NULL Pointer Dereference error and plagues the Windows, macOS, Linux and ChromeOS versions of Adobe Flash Player.📖 Read
via "Threat Post".
Threat Post
Critical Flash Player Flaw Opens Adobe Users to RCE
The flaw stems from a NULL Pointer Dereference error and plagues the Windows, macOS, Linux and ChromeOS versions of Adobe Flash Player.
🕴 Where are the 'Great Exits' in the Data Security Market? 🕴
📖 Read
via "Dark Reading".
If data security were a student, its report card would read "Not performing to potential." Here's why.📖 Read
via "Dark Reading".
Dark Reading
Where are the 'Great Exits' in the Data Security Market?
If data security were a student, its report card would read Not performing to potential. Here's why.
‼ CVE-2020-17411 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-11190.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-17413 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11226.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-17414 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the configuration files used by the Foxit Reader Update Service. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-11229.📖 Read
via "National Vulnerability Database".
🕴 25% of BEC Cybercriminals Based in the US 🕴
📖 Read
via "Dark Reading".
While the US is known to be a prime target for BEC attacks, just how many perpetrators are based there came as a surprise to researchers.📖 Read
via "Dark Reading".
Dark Reading
25% of BEC Cybercriminals Based in the US
While the US is known to be a prime target for BEC attacks, just how many perpetrators are based there came as a surprise to researchers.
🕴 Treasury Dept. Advisory Shines Spotlight on Ransomware Negotiators 🕴
📖 Read
via "Dark Reading".
With attacks showing no signs of abating, some companies have begun offering services to help reduce ransom demands, buy more time, and arrange payments.📖 Read
via "Dark Reading".
Dark Reading
Treasury Dept. Advisory Shines Spotlight on Ransomware Negotiators
With attacks showing no signs of abating, some companies have begun offering services to help reduce ransom demands, buy more time, and arrange payments.
❌ Software AG Data Released After Clop Ransomware Strike – Report ❌
📖 Read
via "Threat Post".
The Clop group attacked Software AG, a German conglomerate with operations in more than 70 countries, threatening to dump stolen data if the whopping $23 million ransom isn’t paid.📖 Read
via "Threat Post".
Threat Post
Software AG Data Released After Clop Ransomware Strike – Report
The Clop group attacked Software AG, a German conglomerate with operations in more than 70 countries, threatening to dump stolen data if the whopping $23 million ransom isn’t paid.
🕴 Phishing in Troubled Waters: 3 Ways Email Attacks May Impact Elections 🕴
📖 Read
via "Dark Reading".
The state of email defenses has a role to play in the US presidential election.📖 Read
via "Dark Reading".
Dark Reading
Phishing in Troubled Waters: 3 Ways Email Attacks May Impact Elections
The state of email defenses has a role to play in the US presidential election.
🔏 50 Colleges Where You Can Get a Cybersecurity Degree Online Now 🔏
📖 Read
via "Digital Guardian".
You can gain many valuable cybersecurity skills online now. To celebrate National Cyber Security Awareness Month (NCSAM) we put together a list of 50 schools offering cybersecurity degrees online.📖 Read
via "Digital Guardian".
Digital Guardian
50 Colleges Where You Can Get a Cybersecurity Degree Online Now
You can gain many valuable cybersecurity skills online now. To celebrate National Cyber Security Awareness Month (NCSAM) we put together a list of 50 schools offering cybersecurity degrees online.
🛠 Raptor WAF 0.61 🛠
📖 Read
via "Packet Storm Security".
Raptor is a web application firewall written in C that uses DFA to block SQL injection, cross site scripting, and path traversals.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Raptor WAF 0.61 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
‼ CVE-2018-20243 ‼
📖 Read
via "National Vulnerability Database".
The implementation of POST with the username and password in the URL parameters exposed the credentials. More infomration is available in fineract jira issues 726 and 629.📖 Read
via "National Vulnerability Database".