❌ The APT Name Game: How Grim Threat Actors Get Goofy Monikers ❌
📖 Read
via "Threatpost | The first stop for security news".
How do advanced persistent threat groups such as Double Secret Octopus and Anchor Panda get their ridiculous names?📖 Read
via "Threatpost | The first stop for security news".
Threat Post
The APT Name Game: How Grim Threat Actors Get Goofy Monikers
How do advanced persistent threat groups such as Darkhotel and Anchor Panda get their ridiculous names?
⚠ Half of IoT devices let down by vulnerable apps ⚠
📖 Read
via "Naked Security".
Half of the apps used to control a range of Internet of Things devices are insecure in a variety of ways, researchers found.📖 Read
via "Naked Security".
Naked Security
Half of IoT devices let down by vulnerable apps
Half of the apps used to control a range of Internet of Things devices are insecure in a variety of ways, researchers found.
⚠ Home DNA kit company says it’s working with the FBI ⚠
📖 Read
via "Naked Security".
FamilyTreeDNA has disclosed that it's opened up more than 1m DNA profiles to the FBI to help find suspects of violent crime.📖 Read
via "Naked Security".
Naked Security
Home DNA kit company now lets users opt out of FBI data sharing
FamilyTreeDNA has disclosed that it’s opened up DNA profiles to the FBI to help find suspects of violent crime.
❌ Remote Desktop Protocol Clients Rife with Remote Code-Execution Flaws ❌
📖 Read
via "Threatpost | The first stop for security news".
Several flaws in both open-source RDP clients and in Microsoft's own proprietary client make it possible for a malicious RDP server to infect a client computer – which could then allow for an intrusion into the IT network as a whole.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Remote Desktop Protocol Clients Rife with Remote Code-Execution Flaws
Several flaws in both open-source RDP clients and in Microsoft's own proprietary client make it possible for a malicious RDP server to infect a client computer – which could then allow for an intrusion into the IT network as a whole.
🕴 Black Hat USA 2019 Offers a Boatload of New Training Opportunities 🕴
📖 Read
via "Dark Reading: ".
Led by top infosec talent, these cutting-edge courses are an efficient way to get practical, hands-on training in everything from blockchain security to machine learning.📖 Read
via "Dark Reading: ".
Dark Reading
Black Hat USA 2019 Offers a Boatload of New Training Opportunities
Led by top infosec talent, these cutting-edge courses are an efficient way to get practical, hands-on training in everything from blockchain security to machine learning.
❌ EU Recalls Children’s Smartwatch That Leaks Location Data ❌
📖 Read
via "Threatpost | The first stop for security news".
The children's smartwatch allows bad actors to track their location and communicate with them, according to the alert.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
EU Recalls Children’s Smartwatch That Leaks Location Data
The children's smartwatch allows bad actors to track their location and communicate with them, according to the alert.
🕴 Taming the Wild, West World of Security Product Testing 🕴
📖 Read
via "Dark Reading: ".
The industry has long needed an open, industry-standard testing framework. NetSecOPEN is working to make that happen.📖 Read
via "Dark Reading: ".
Dark Reading
Taming the Wild, West World of Security Product Testing
The industry has long needed an open, industry-standard testing framework. NetSecOPEN is working to make that happen.
❌ Google Patches Critical .PNG Image Bug ❌
📖 Read
via "Threatpost | The first stop for security news".
Eleven critical bugs will be patched as part of the February Android Security Bulletin.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
Google Patches Critical .PNG Image Bug
Eleven critical bugs will be patched as part of the February Android Security Bulletin.
🔐 Why your business needs to work with the government to fight cyber warfare 🔐
📖 Read
via "Security on TechRepublic".
The US government will not be able to mitigate a cyber-enabled economic warfare attack without help from the private sector, according to a report from FDD and the Chertoff Group.📖 Read
via "Security on TechRepublic".
TechRepublic
Why your business needs to work with the government to fight cyber warfare
The US government will not be able to mitigate a cyber-enabled economic warfare attack without help from the private sector, according to a report from FDD and the Chertoff Group.
⚠ Ep. 018 – Home invasions, snoopy apps and Android versus iOS [PODCAST] ⚠
📖 Read
via "Naked Security".
Here's the latest Naked Security podcast - give it a listen!📖 Read
via "Naked Security".
Naked Security
Ep. 018 – Home invasions, snoopy apps and Android versus iOS [PODCAST]
Here’s the latest Naked Security podcast – give it a listen!
ATENTION‼ New - CVE-2017-1202
📖 Read
via "National Vulnerability Database".
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 123677.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-1200
📖 Read
via "National Vulnerability Database".
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack. The software might connect to a malicious host while believing it is a trusted host, or the software might be deceived into accepting spoofed data that appears to originate from a trusted host. IBM X-Force ID: 123675.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-1198
📖 Read
via "National Vulnerability Database".
IBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 123673.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-1177
📖 Read
via "National Vulnerability Database".
IBM BigFix Compliance 1.7 through 1.9.91 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 123429.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-1000282
📖 Read
via "National Vulnerability Database".
Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.📖 Read
via "National Vulnerability Database".
🕴 No Sign of 'Material' Nation-State Actor Impact on 2018 US Midterms 🕴
📖 Read
via "Dark Reading: ".
That's the conclusion of a classified postmortem report sent to the White House yesterday by Acting Attorney General and DHS Secretary.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading
🕴 Over 59K Data Breaches Reported in EU Under GDPR 🕴
📖 Read
via "Dark Reading: ".
In addition, 91 reported fines have been imposed since the regulation went into effect last May.📖 Read
via "Dark Reading: ".
Darkreading
Over 59K Data Breaches Reported in EU Under GDPR
In addition, 91 reported fines have been imposed since the regulation went into effect last May.
🕴 Mitigating the Security Risks of Cloud-Native Applications 🕴
📖 Read
via "Dark Reading: ".
While containers can create more secure application development environments, they also introduce new security challenges that affect security and compliance.📖 Read
via "Dark Reading: ".
Dark Reading
Mitigating the Security Risks of Cloud-Native Applications
While containers can create more secure application development environments, they also introduce new security challenges that affect security and compliance.
🕴 Cybercriminals Exploit Gmail Feature to Scale Up Attacks 🕴
📖 Read
via "Dark Reading: ".
Criminals are taking advantage of Gmail's 'dots don't matter' feature to set up multiple fraudulent accounts on websites, using variations of the same email address, Agari says.📖 Read
via "Dark Reading: ".
Darkreading
Cybercriminals Exploit Gmail Feature to Scale Up Attacks
Criminals are taking advantage of Gmail's 'dots don't matter' feature to set up multiple fraudulent accounts on websites, using variations of the same email address, Agari says.
❌ IoT Scale Flaws Enable Denial of Service, Privacy Issues ❌
📖 Read
via "Threatpost | The first stop for security news".
Flaws in this connected smart scale might give the diet-challenged a legitimate reason to be nervous about using this vulnerable IoT device.📖 Read
via "Threatpost | The first stop for security news".
Threat Post
IoT Scale Flaws Enable Denial of Service, Privacy Issues
Flaws in this connected smart scale might give the diet-challenged a legitimate reason to be nervous.