🛡 Cybersecurity & Privacy 🛡 - News
25.9K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
🕴 Black Hat Asia Offers New IoT Security Tools & Tricks 🕴

Come to Black Hat Asia in March for an expert look at what's happening in the world of Internet of Things, and what you can do to secure it.

📖 Read

via "Dark Reading: ".
🔐 Photos: The top 10 computer security applications of 2019 🔐

These apps will help keep your enterprise safe from malware and other cybersecurity threats.

📖 Read

via "Security on TechRepublic".
Bit-and-Piece DDoS Method Emerges to Torment ISPs

Perpetrators are using smaller, bit-and-piece methods to inject junk into legitimate traffic, causing attacks to bypass detection rather than sounding alarms with large, obvious attack spikes.

📖 Read

via "Threatpost | The first stop for security news".
🔐 IoT credential compromise attacks open your devices up to spying 🔐

Security updates for the lifespan of a given device are critical to protecting your connected device against hackers, according to a Barracuda report.

📖 Read

via "Security on TechRepublic".
🔐 Rise of multicloud: 58% of businesses using combination of AWS, Azure, or Google Cloud 🔐

Multicloud is much more popular than hybrid cloud, with only 33% of professionals using a hybrid model, according to a Kentik report.

📖 Read

via "Security on TechRepublic".
ThreatList: Credential-Sniffing Phishing Attacks Erupted in 2018

Credential compromise emerged the main target for phishing campaigns in 2018 - rather than infecting victims' devices with malware.

📖 Read

via "Threatpost | The first stop for security news".
🕴 Cloud Customers Faced 681M Cyberattacks in 2018 🕴

The most common attacks involved software vulnerabilities, stolen credentials, Web applications, and IoT devices.

📖 Read

via "Dark Reading: ".
🔐 Hackers are still using cloud services to mask attack origin and build false trust 🔐

Using Google App Engine to mask the destination of links is a staggeringly easy way to conduct a phishing campaign, but Google claims it is not their problem.

📖 Read

via "Security on TechRepublic".
🕴 New Phishing Campaign Hits With Triple Threat 🕴

Attack threatens victims with three "deadly malware" infestations if they don't give up critical email account credentials.

📖 Read

via "Dark Reading: ".
🕴 New Phishing Campaign Packs Triple Threat 🕴

Attack threatens victims with three "deadly malware" infestations if they don't give up critical email account credentials.

📖 Read

via "Dark Reading: ".
🔐 How to integrate SSH key authentication into KeePassXC 🔐

Make using SSH key authentication a snap with the new ssh-agent feature found in KeePassXC.

📖 Read

via "Security on TechRepublic".
🕴 Collateral Damage: When Cyberwarfare Targets Civilian Data 🕴

You can call it collateral damage. You can call it trickledown cyberwarfare. Either way, foreign hacker armies are targeting civilian enterprises - as a means of attacking rival government targets.

📖 Read

via "Dark Reading: ".
🕴 Database of 24 Million Mortgage, Loan Records Left Exposed Online 🕴

Breach latest example of how misconfigurations, human errors undermine security in a big way, experts say.

📖 Read

via "Dark Reading: ".
🕴 Cyberattackers Bait Financial Firms with Google Cloud Platform 🕴

A new wave of attacks abuses the Google Cloud Platform URL redirection in PDF decoys, sending users to a malicious link.

📖 Read

via "Dark Reading: ".
Fighting Fire with Fire: API Automation Risks

A look at API attack trends such as the current (and failing) architectural designs for addressing security of these API transactions.

📖 Read

via "Threatpost | The first stop for security news".
🕴 Cisco Study Finds Fewer Data Breaches at GDPR-Ready Firms 🕴

Many organizations find that getting their data privacy house in order is paying off.

📖 Read

via "Dark Reading: ".
ATENTION New - CVE-2017-18359

PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote attackers to cause a denial of service via crafted ST_AsX3D function input, as demonstrated by an abnormal server termination for "SELECT ST_AsX3D('LINESTRING EMPTY');" because empty geometries are mishandled.

📖 Read

via "National Vulnerability Database".
Facebook debuts scam ads reporting tool

Adverts on Facebook featuring fake celebrity endorsements scam people out of their savings, and Facebook is now doing something about it.

📖 Read

via "Naked Security".
Cops catch $15m crypto-crook

A man has been arrested a year after stealing €10m ($15m) of the IoT-focused cryptocurrency IOTA using bogus software that tricked users.

📖 Read

via "Naked Security".