🔐 Trojan malware is back and it's the biggest hacking threat to your business 🔐

Old school but effective, hackers are shifting aware from in-your-face ransomware to attacks that are much more subtle.

📖 Read

via "Security on TechRepublic".

🕴 Discover New Tools for Network Testing & Defense at Black Hat Asia 🕴

Find yourself some of the latest and most exciting cybersecurity tools at the Arsenal, where you can meet and chat with their creators.

📖 Read

via "Dark Reading: ".

🕴 Enterprise Malware Detections Up 79% as Attackers Refocus 🕴

A new report on the state of malware shows a spike in B2B malware, with former banking Trojans Emotet and TrickBot topping the list.

📖 Read

via "Dark Reading: ".

🔐 Hackers impersonate these 10 brands the most in phishing attacks 🔐

Phishers often spoof major tech brands in their efforts to gain payments from individuals and businesses, according to a Vade Secure report.

📖 Read

via "Security on TechRepublic".

❌ U.S. Gov Issues Urgent Warning of DNS Hijacking Attacks ❌

An emergency directive from the Department of Homeland Security provides "required actions" for U.S. government agencies to prevent widespread DNS hijacking attacks.

📖 Read

via "Threatpost | The first stop for security news".

🔐 How to authenticate a Linux client with LDAP server 🔐

If you've ever wanted to authenticate a Linux desktop to an OpenLDAP server, here's how it's done.

📖 Read

via "Security on TechRepublic".

🔐 How to authenticate a Linux client with LDAP server 🔐

With OpenLDAP, you can manage users on a centralized directory server and then configure each desktop to authenticate to that server.

📖 Read

via "Security on TechRepublic".

🕴 Think Twice Before Paying a Ransom 🕴

Why stockpiling cryptocurrency or paying cybercriminals is not the best response.

📖 Read

via "Dark Reading: ".

🕴 Cybercriminals Home in on Ultra-High Net Worth Individuals 🕴

Research shows that better corporate security has resulted in some hackers shifting their sights to the estates and businesses of wealthy families.

📖 Read

via "Dark Reading: ".

🔐 Security is the no. 1 IT barrier to cloud and SaaS adoption 🔐

More than 70% of tech professionals said security spending has increased in the past year, according to a Ping Identity report.

📖 Read

via "Security on TechRepublic".

❌ ‘Chaos’ iPhone X Attack Alleges Remote Jailbreak ❌

The attack makes use of previously disclosed critical vulnerabilities in the Apple Safari web browser and iOS.

📖 Read

via "Threatpost | The first stop for security news".

🔐 How to Lock a User Account After X Number of Incorrect Logins on Cent OS 7 🔐

Jack Wallen shows you how to lock out users after failed login attempts in CentOS 7.

📖 Read

via "Security on TechRepublic".

❌ 6 Signs of Successful Threat Hunting ❌

Here are six tips to put threat hunters in the driver's seat so they can outsmart their adversaries.

📖 Read

via "Threatpost | The first stop for security news".

🔐 Modular Anatova ransomware encrypts data as quickly as possible before detection 🔐

The new malware is being propagated on P2P networks, and demands a ransom equivalent to $725 USD, according to McAfee Labs.

📖 Read

via "Security on TechRepublic".

🕴 Google Creates Online Phishing Quiz 🕴

Google Alphabet incubator Jigsaw says knowing how to spot a phish plus two-factor authentication are the best defenses against falling for a phishing email.

📖 Read

via "Dark Reading: ".

❌ Monero: Cybercrime’s Top Choice for Mining Malware ❌

Illicit Monero-mining malware accounts for more than 4 percent of the XMR in circulation, and has created $57 million in profits for the bad guys.

📖 Read

via "Threatpost | The first stop for security news".

<b>&#9000; How the U.S. Govt. Shutdown Harms Security &#9000;</b>

<code>The ongoing partial U.S. federal government shutdown is having a tangible, negative impact on cybercrime investigations, according to interviews with federal law enforcement investigators and a report issued this week by a group representing the interests of FBI agents. Even if lawmakers move forward on new proposals to reopen the government, sources say the standoff is likely to have serious repercussions for federal law enforcement agencies for years to come.</code><code>Media</code><code>One federal agent with more than 20 years on the job told KrebsOnSecurity the shutdown “is crushing our ability to take the fight to cyber criminals.”</code><code>“The talent drain after this is finally resolved will cost us five years,” said the source, who asked to remain anonymous because he was not authorized to speak to the news media. “Literally everyone I know who is able to retire or can find work in the private sector is actively looking, and the smart private companies are aware and actively recruiting. As a nation, we are much less safe from a cyber security posture than we were a month ago.”</code><code>The source said his agency can’t even get agents and analysts the higher clearances needed for sensitive cases because everyone who does the clearance processing is furloughed.</code><code>“Investigators who are eligible to retire or who simply wish to walk away from their job aren’t retiring or quitting now because they can’t even be processed out due to furlough of the organization’s human resources people,” the source said. “These are criminal investigations involving national security. It’s also a giant distraction and people aren’t as focused.”</code><code>The source’s comments echoed some of the points made in a 72-page report (PDF) released this week by the FBI Agents Association, a group that advocates on behalf of active and retired FBI special agents.</code><code>“Today we have no funds for making Confidential Human Source payments,” reads a quote from the FBIAA report, attributed to an agent in the FBI’s northeast region. “In my situation, I have two sources that support our national security cyber mission that no longer have funding. They are critical sources providing tripwires and intelligence that protect the United States against our foreign adversaries. The loss in productivity and pertinent intelligence is immeasurable.”</code><code>My federal law enforcement source mentioned his agency also was unable to pay confidential informants for their help with ongoing investigations.</code><code>“We are having the same problems like not being able to pay informants, no travel, critical case coordination meetings postponed, and no procurements to further the mission,” the source said.</code><code>The extended shutdown directly affects more than 800,000 workers, many of them furloughed or required to work without pay. Some federal employees, now missing at least two back-to-back paychecks, are having trouble keeping food on the table. CNN reports that FBI field offices across the country are opening food banks to help support special agents and staff struggling without pay.</code><code>An extended lack of pay is forcing many agents to seek side hustles and jobs, despite rules that seek to restrict such activity, according to media reports. Missing multiple paychecks also can force investigators to take on additional debt. This is potentially troublesome because excess debt down the road can lead to problems keeping one’s security clearances.</code><code>Excessive debt is a threat to clearances because it can make people more susceptible to being drawn into illegal activities or taking bribes for money, which in turn may leave them vulnerable to extortion. Indeed, this story from Clearancejobs.com observes that the shutdown may be inadvertently creating new recruiting opportunities for foreign intelligence operatives.</code><code>“If you are a hostile…

ATENTION‼ New - CVE-2017-17836

In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow. An attacker who has limited access to airflow, weather it be via XSS or by leaving a machine unlocked can exfil all credentials from the system.

📖 Read

via "National Vulnerability Database".

ATENTION‼ New - CVE-2017-17835

In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.

📖 Read

via "National Vulnerability Database".

ATENTION‼ New - CVE-2017-15720

In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.

📖 Read

via "National Vulnerability Database".

🕴 The Evolution of SIEM 🕴



📖 Read

via "Dark Reading: ".