❌ Prepare to Defend Your Network Against Swarm-as-a-Service ❌
📖 Read
via "Threatpost | The first stop for security news".
Swarm technology may be a game changer for the bad guys if organizations don’t change their tactics.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Prepare to Defend Your Network Against Swarm-as-a-Service
Swarm technology may be a game changer for the bad guys if organizations don’t change their tactics.
🔐 How to stay safe from Super Bowl-related cybersecurity risks 🔐
📖 Read
via "Security on TechRepublic".
From counterfeit tickets to live streaming deals--Super Bowl 53 can generate a slew of cybersecurity risks. Learn how to protect yourself.📖 Read
via "Security on TechRepublic".
TechRepublic
How to stay safe from Super Bowl-related cybersecurity risks
From counterfeit tickets to live streaming deals, Super Bowl 53 can generate a slew of cybersecurity risks. Learn how to protect yourself.
❌ TheMoon Rises Again, With a Botnet-as-a-Service Threat ❌
📖 Read
via "Threatpost | The first stop for security news".
A new module allows it to be rented to other malicious actors -- and it's likely other new capabilities are coming down the pike.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
TheMoon Rises Again, With a Botnet-as-a-Service Threat
A new module allows it to be rented to other malicious actors — and it's likely other new capabilities are coming down the pike.
❌ Facebook Boots Hundreds of Iran-Linked Accounts For Spreading Misinformation ❌
📖 Read
via "Threatpost | The first stop for security news".
Facebook is continuing to crack down on misinformation, political meddling, and "coordinated inauthentic behavior" on its platform.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Facebook Boots Hundreds of Iran-Linked Accounts For Spreading Misinformation
Facebook is continuing to crack down on misinformation, political meddling, and "coordinated inauthentic behavior" on its platform.
🕴 Cisco Router Vulnerability Gives Window into Researchers' World 🕴
📖 Read
via "Dark Reading: ".
The research around a recent vulnerability shows how researchers follow leads and find unexpected results.📖 Read
via "Dark Reading: ".
Darkreading
Cisco Router Vulnerability Gives Window into Researchers' World
The research around a recent vulnerability shows how researchers follow leads and find unexpected results.
⚠ Google says sorry for pulling a Facebook with monitoring program ⚠
📖 Read
via "Naked Security".
It was using the same Apple enterprise back door as Facebook to get its market research done, but it owned up and backed off.📖 Read
via "Naked Security".
Naked Security
Google says sorry for pulling a Facebook with monitoring program
It was using the same Apple enterprise back door as Facebook to get its market research done, but it owned up and backed off.
⚠ Microsoft Azure data deleted because of DNS outage ⚠
📖 Read
via "Naked Security".
Users of Microsoft’s Azure system lost database records as part of a mass outage on Tuesday. A combination of DNS problems and automated scripts were to blame, said reports.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Hacker talks to baby through Nest security cam, jacks up thermostat ⚠
📖 Read
via "Naked Security".
Yet another family unnerved by yet another voice coming from a nursery webcam serves as yet another argument against password reuse.📖 Read
via "Naked Security".
Naked Security
Hacker talks to baby through Nest security cam, jacks up thermostat
Yet another family unnerved by yet another voice coming from a nursery webcam serves as yet another argument against password reuse.
ATENTION‼ New - CVE-2017-18361
📖 Read
via "National Vulnerability Database".
In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis.📖 Read
via "National Vulnerability Database".
⚠ Credential dump contains another 2.2 billion pwned accounts ⚠
📖 Read
via "Naked Security".
How many user credentials have fallen into the hands of criminals during a decade of data breaches? Billions, according to two recent discoveries.📖 Read
via "Naked Security".
Naked Security
Credential dump contains another 2.2 billion pwned accounts
How many user credentials have fallen into the hands of criminals during a decade of data breaches? Billions, according to two recent discoveries.
🔐 Spectre and Meltdown explained: A comprehensive guide for professionals 🔐
📖 Read
via "Security on TechRepublic".
Staying up to date on Spectre and Meltdown can be challenging. This guide includes in-depth explanations about these uniquely dangerous security vulnerabilities and the best mitigation solutions.📖 Read
via "Security on TechRepublic".
TechRepublic
Spectre and Meltdown explained: A comprehensive guide for professionals
Staying up to date on Spectre and Meltdown can be challenging. This guide includes in-depth explanations about these uniquely dangerous security vulnerabilities and the best mitigation solutions.
🕴 Study the Cutting Edge of Cybersecurity at Black Hat Asia 🕴
📖 Read
via "Dark Reading: ".
Whether you want an in-depth look at one of the biggest data breaches in recent memory or some advanced data forensics training, Black Hat Asia is the place to be.📖 Read
via "Dark Reading: ".
Dark Reading
Study the Cutting Edge of Cybersecurity at Black Hat Asia
Whether you want an in-depth look at one of the biggest data breaches in recent memory or some advanced data forensics training, Black Hat Asia is the place to be.
⚠ Linux user? Check those patches! Public exploit published for systemd security holes… ⚠
📖 Read
via "Naked Security".
A pair of bugs in a very widely used Linux system tool called systemd have just been "weaponised" - check you're patched!📖 Read
via "Naked Security".
Naked Security
Linux user? Check those patches! Public exploit published for systemd security holes…
A pair of bugs in a very widely used Linux system tool called systemd have just been “weaponised” – check you’re patched!
<b>⌨ 250 Webstresser Users to Face Legal Action ⌨</b>
<code>More than 250 customers of a popular and powerful online attack-for-hire service that was dismantled by authorities in 2018 are expected to face legal action for the damage they caused, according to Europol, the European Union’s law enforcement agency.</code><code>In April 2018, investigators in the U.S., U.K. and the Netherlands took down attack-for-hire service WebStresser[.]org and arrested its alleged administrators. Prior to the takedown, the service had more than 151,000 registered users and was responsible for launching some four million attacks over three years. Now, those same authorities are targeting people who paid the service to conduct attacks.</code><code>Media</code><code>Webstresser.org (formerly Webstresser.co), as it appeared in 2017.</code><code>In the United Kingdom, police have seized more than 60 personal electronic devices from a number of Webstresser users, and some 250 customers of the service will soon face legal action, Europol said in a statement released this week.</code><code>“Size does not matter – all levels of users are under the radar of law enforcement, be it a gamer booting out the competition out of a game, or a high-level hacker carrying out DDoS attacks against commercial targets for financial gain,” Europol officials warned.</code><code>The focus on Webstresser’s customers is the latest phase of “Operation Power Off,” which targeted one of the most active services for launching point-and-click distributed denial-of-service (DDoS) attacks. WebStresser was one of many so-called “booter” or “stresser” services — virtual hired muscle that even completely unskilled users can rent to knock nearly any website or Internet user offline.</code><code>Operation Power Off is part of a broader law enforcement effort to disrupt the burgeoning booter service industry and to weaken demand for such services. In December, authorities in the United States filed criminal charges against three men accused of running booter services, and orchestrated a coordinated takedown of 15 different booter sites.</code><code>Media</code><code>This seizure notice appeared on the homepage of more than a dozen popular “booter” or “stresser” DDoS-for-hire Web sites in December 2018.</code><code></code><code>The takedowns come as courts in the United States and Europe are beginning to hand down serious punishment for booter service operators, their customers, and for those convicted of launching large-scale DDoS attacks. Last month, a 34-year-old Connecticut man received a 10-year prison sentence for carrying out DDoS attacks a number of hospitals in 2014. Also last month, a 30-year-old in the United Kingdom was sentenced to 32 months in jail for using an army of hacked devices to crash large portions of Liberia’s Internet access in 2016.</code><code>In December 2018, the ringleader of an online crime group that launched DDoS attacks against Web sites — including several against KrebsOnSecurity — was sentenced to three years in a U.K. prison. And in 2017, a 20-year-old from Britain was sentenced to two years in jail for renting out Titanium Stresser, a booter service that earned him $300,000 over several years it was in operation.</code><code>Many in the hacker community have criticized authorities for targeting booter service administrators and users and for not pursuing what they perceive as more serious cybercriminals, noting that the vast majority of both groups are young men under the age of 21 and are using booter services to settle petty disputes over online games.</code><code>But not all countries involved in Operation Power Off are taking such a punitive approach. In the Netherlands, the police and the prosecutor’s office have deployed new legal intervention called “Hack_Right,” a diversion program intended for first-time cyber offenders. Europol says at least one user of Webstresser has already received this alternative sanction.</code><code>“Skills…
<code>More than 250 customers of a popular and powerful online attack-for-hire service that was dismantled by authorities in 2018 are expected to face legal action for the damage they caused, according to Europol, the European Union’s law enforcement agency.</code><code>In April 2018, investigators in the U.S., U.K. and the Netherlands took down attack-for-hire service WebStresser[.]org and arrested its alleged administrators. Prior to the takedown, the service had more than 151,000 registered users and was responsible for launching some four million attacks over three years. Now, those same authorities are targeting people who paid the service to conduct attacks.</code><code>Media</code><code>Webstresser.org (formerly Webstresser.co), as it appeared in 2017.</code><code>In the United Kingdom, police have seized more than 60 personal electronic devices from a number of Webstresser users, and some 250 customers of the service will soon face legal action, Europol said in a statement released this week.</code><code>“Size does not matter – all levels of users are under the radar of law enforcement, be it a gamer booting out the competition out of a game, or a high-level hacker carrying out DDoS attacks against commercial targets for financial gain,” Europol officials warned.</code><code>The focus on Webstresser’s customers is the latest phase of “Operation Power Off,” which targeted one of the most active services for launching point-and-click distributed denial-of-service (DDoS) attacks. WebStresser was one of many so-called “booter” or “stresser” services — virtual hired muscle that even completely unskilled users can rent to knock nearly any website or Internet user offline.</code><code>Operation Power Off is part of a broader law enforcement effort to disrupt the burgeoning booter service industry and to weaken demand for such services. In December, authorities in the United States filed criminal charges against three men accused of running booter services, and orchestrated a coordinated takedown of 15 different booter sites.</code><code>Media</code><code>This seizure notice appeared on the homepage of more than a dozen popular “booter” or “stresser” DDoS-for-hire Web sites in December 2018.</code><code></code><code>The takedowns come as courts in the United States and Europe are beginning to hand down serious punishment for booter service operators, their customers, and for those convicted of launching large-scale DDoS attacks. Last month, a 34-year-old Connecticut man received a 10-year prison sentence for carrying out DDoS attacks a number of hospitals in 2014. Also last month, a 30-year-old in the United Kingdom was sentenced to 32 months in jail for using an army of hacked devices to crash large portions of Liberia’s Internet access in 2016.</code><code>In December 2018, the ringleader of an online crime group that launched DDoS attacks against Web sites — including several against KrebsOnSecurity — was sentenced to three years in a U.K. prison. And in 2017, a 20-year-old from Britain was sentenced to two years in jail for renting out Titanium Stresser, a booter service that earned him $300,000 over several years it was in operation.</code><code>Many in the hacker community have criticized authorities for targeting booter service administrators and users and for not pursuing what they perceive as more serious cybercriminals, noting that the vast majority of both groups are young men under the age of 21 and are using booter services to settle petty disputes over online games.</code><code>But not all countries involved in Operation Power Off are taking such a punitive approach. In the Netherlands, the police and the prosecutor’s office have deployed new legal intervention called “Hack_Right,” a diversion program intended for first-time cyber offenders. Europol says at least one user of Webstresser has already received this alternative sanction.</code><code>“Skills…
🕴 KISS, Cyber & the Humble but Nourishing Chickpea 🕴
📖 Read
via "Dark Reading: ".
The combination of simple, straightforward, and methodical ingredients are the keys to developing a balanced and well-rounded security program.📖 Read
via "Dark Reading: ".
Dark Reading
KISS, Cyber & the Humble but Nourishing Chickpea
The combination of simple, straightforward, and methodical ingredients are the keys to developing a balanced and well-rounded security program.
❌ Cybercriminals Aim for the Super Bowl Goal Posts ❌
📖 Read
via "Threatpost | The first stop for security news".
Scams, infrastructure attacks, data harvesting and attacks on streamers are all in the offing.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Cybercriminals Aim for the Super Bowl Goal Posts
Scams, infrastructure attacks, data harvesting and attacks on streamers are all in the offing.
🔐 Why you need to use DMARC and SPF on mail servers to prevent phishing and fraud 🔐
📖 Read
via "Security on TechRepublic".
Open-source, industry standard specifications are available to protect your business, but real-world deployment is still lower than optimal.📖 Read
via "Security on TechRepublic".
TechRepublic
Why you need to use DMARC and SPF on mail servers to prevent phishing and fraud
Open-source, industry standard specifications are available to protect your business, but real-world deployment is still lower than optimal.
❌ Threatpost News Wrap Podcast For Feb. 1 ❌
📖 Read
via "Threatpost | The first stop for security news".
From Facebook's research app being pulled from iOS devices to a new-found dump of compromised credentials, here are the top news of the week.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Threatpost News Wrap Podcast For Feb. 1
From Facebook's research app being pulled from iOS devices to a new-found dump of compromised credentials, here are the top news of the week.
ATENTION‼ New - CVE-2016-10741
📖 Read
via "National Vulnerability Database".
In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) because there is a race condition between direct and memory-mapped I/O (associated with a hole) that is handled with BUG_ON instead of an I/O failure.📖 Read
via "National Vulnerability Database".
⚠ FaceTime bug, eavesdropping and digital snooping – what to do? [VIDEO] ⚠
📖 Read
via "Naked Security".
In this week's Naked Security Live video: what to do about microphone-equipped devices in your home?📖 Read
via "Naked Security".
Naked Security
FaceTime bug, eavesdropping and digital snooping – what to do? [VIDEO]
In this week’s Naked Security Live video: what to do about microphone-equipped devices in your home?