🕴 'Simplify Everything': Google Talks Container Security in 2019 🕴

Google Cloud's container security lead shares predictions, best practices, and what's top of mind for customers.

📖 Read

via "Dark Reading: ".

🕴 Criminals Use Locally Connected Devices to Attack, Loot Banks 🕴

Tens of millions of dollars stolen from at least eight banks in East Europe, Kasperksy Lab says.

📖 Read

via "Dark Reading: ".

❌ ThreatList: Gift Card-Themed BEC Holiday Scams Spike ❌

Watch out for emails about gift cards and corporate donations, researcher warn.

📖 Read

via "Threatpost | The first stop for security news".

🕴 'PowerSnitch' Hacks Androids via Power Banks 🕴

Researcher demonstrates how attackers could steal data from smartphones while they charge up.

📖 Read

via "Dark Reading: ".

🔐 Networking trends and news: 2018 year in review 🔐

Networking is a fairly old subject, but there are still plenty of interesting things happening. Highlights from 2018 include stories about security, 5G, net neutrality, the Linux Foundation, and more.

📖 Read

via "Security on TechRepublic".

⚠ Monday review – the hot 21 stories of the week ⚠

From UPnP router attacks to the Kubernetes cloud computing bug, and everything in between. It's time for your weekly roundup.

📖 Read

via "Naked Security".

⚠ Microsoft calls for laws on facial recognition, issues principles ⚠

Profits are nice, but "We don’t believe that the world will be best served by a commercial race to the bottom," says President Brad Smith.

📖 Read

via "Naked Security".

⚠ Microsoft’s gutting Edge and stuffing it with Chromium ⚠

Edge joins Chrome, Opera, Vivaldi, Yandex, and Brave. Better for web compatibility, but if one thing breaks, they all break.

📖 Read

via "Naked Security".

⚠ Android click fraud apps mimic Apple iPhones to boost revenue ⚠

SophosLabs has uncovered a click fraud campaign in which malicious Android apps masquerade as being hosted on Apple devices to earn rewards.

📖 Read

via "Naked Security".

⚠ Massive botnet chews through 20,000 WordPress sites ⚠

Attackers have infected 20,000 WordPress sites by brute-forcing administrator usernames and passwords.

📖 Read

via "Naked Security".

🕴 6 CISO Resolutions for 2019 🕴

The ultimate to-do list for ambitious security leaders.

📖 Read

via "Dark Reading: ".

🔐 IT leaders spend 10% more money improving customer experience than security 🔐

Prioritizing user experience at the expense of security can increase sales, though pivoting from passwords is still problematic.

📖 Read

via "Security on TechRepublic".

❌ Volkswagen Giveaway Scam Peddles Ad Networks ❌

The scam is spread via Facebook and WhatsApp messages.

📖 Read

via "Threatpost | The first stop for security news".

🕴 6 Cloud Security Predictions for 2019 🕴

How the fast pace of cloud computing adoption in 2018 will dramatically change the security landscape next year.

📖 Read

via "Dark Reading: ".

ATENTION‼ New - CVE-2016-10502

While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835 and SDA660.

📖 Read

via "National Vulnerability Database".

❌ Old-School Bagle Worm Spotted in Modern Spam Campaigns ❌

Bagle.A and Bagle.B date back to 2004.

📖 Read

via "Threatpost | The first stop for security news".

❌ Sextortion Emails Force Payment via GandCrab Ransomware ❌

Emails say they contain a link with screenshots of victims' compromising activity. In reality, the link executes ransomware.

📖 Read

via "Threatpost | The first stop for security news".

❌ Google Accelerates Google+ Shutdown After New Bug Discovered ❌

The consumer version of Google+ will now be shut down in April instead of August after a bug was found that impacts at least 50 million users.

📖 Read

via "Threatpost | The first stop for security news".

🕴 'Dr. Shifro' Prescribes Fake Ransomware Cure 🕴

A Russian firm aims to capitalize on ransomware victims' desperation by offering to unlock files then passing money to attackers.

📖 Read

via "Dark Reading: ".

<b>&#9000; How Internet Savvy are Your Leaders? &#9000;</b>

<code>Back in April 2015, I tweeted about receiving a letter via snail mail suggesting the search engine rankings for a domain registered in my name would suffer if I didn’t pay a bill for some kind of dubious-looking service I’d never heard of. But it wasn’t until the past week that it become clear how many organizations — including towns, cities and political campaigns — actually have fallen for this brazen scam.</code><code>Media</code><code>Image: Better Business Bureau.</code><code>The letter I tweeted about was from a company called Web Listings Inc., and it said I should pay a $85 charge for an “annual web site search engine” service.</code><code>The first clue that this was probably a scam was the letter said halfway down in capital letters “THIS IS NOT A BILL,” although it sure was made to look like one. Also, the domain it referenced was “fuckbriankrebs.com,” which was indeed registered using my street address but certainly not by me.</code><code>The sad truth is plenty of organizations *are* paying the people behind this charade, which is probably why Web Listings has been running it continuously for more than a decade. Most likely that’s because some percentage of recipients confuse this notice with a warning about a domain name they own that is about to expire and needs to be renewed.</code><code>We know plenty of people are getting snookered thanks to searchable online records filed by a range of political campaigns, towns, cities and municipalities — all of which are required to publicly report how they spend their money (or at least that of their constituents).</code><code>According to a statement filed with the Federal Election Commission, one of the earliest public records involving a payment to Web Listings dates back to 2008 and comes from none other than the the 2008 Hillary Clinton for President fund.</code><code>The documents unearthed in this story all came compliments of Ron Guilmette, a most dogged and intrepid researcher who usually spends his time tracking down and suing spammers. Guilmette said most of the public references he found regarding payments to Web Services Inc. are from political campaigns and small towns.</code><code>“Which naturally raises the question: Should we really be trusting these people with our money?” Guilmette said. “What kind of people or organizations are most likely to pay a bill that is utterly phony baloney, and that actually isn’t due and payable? The answer is people and organizations that are not spending their own money.”</code><code>Also paying $85 (PDF) to Web Listings was the 2015 campaign for Democrat Jim Kenney, the current mayor of Philadelphia.</code><code>A fund for the New York City Council campaign of Zead Ramadan (D) forked over $85 to Web Listings in 2013.</code><code>Also in 2013, the Committee to Elect Judge Victor Heutsche (D) paid $85 to keep his Web site in good standing with Web Listings. Paul T. Davis, a former Democratic state representative from Kansas handed $85 (PDF) to Web Listings in 2012.
</code><code>Media</code><code>Image: Better Business Bureau.</code><code>Lest anyone think that somehow Democratic candidates for office are more susceptible to these types of schemes, a review of the publicly-searchable campaign payments to Web Listings Inc. uncovered by Guilmette shows a majority of them were for Web sites supporting Republican candidates.</code><code>The Friends of Mike Turzai committee spent $65 in 2010 on the GOP Representative from Pennsylvania.</code><code>The fundraising committee for Republican Dick Black‘s 2012 campaign for the Virginia Senate also paid Web Listings Inc. $85. The campaign to elect Ben Chafin as a Republican delegate in Virginia in 2013 also paid out. </code><code>Robert Montgomery, a former GOP state representative in Kansas, paid $85 (PDF) to Web Listings in 2012.</code><code>Those in charge of the purse strings for the “Friends of GOP New York State…

🕴 Satan Ransomware Variant Exploits 10 Server-Side Flaws 🕴

Windows, Linux systems vulnerable to self-propagating 'Lucky' malware, security researchers say.

📖 Read

via "Dark Reading: ".