🕴 Bounty Hunters Find 100K+ Bugs Under HackerOne Program in 2018 🕴
📖 Read
via "Dark Reading: ".
Organizations signed up with the vulnerability disclosure platform shelled out a record $19 million for bug discoveries in their systems.📖 Read
via "Dark Reading: ".
Dark Reading
Bounty Hunters Find 100K+ Bugs Under HackerOne Program in 2018
Organizations signed up with the vulnerability disclosure platform shelled out a record $19 million for bug discoveries in their systems.
🕴 Chronicle Releases Chapter One: Backstory 🕴
📖 Read
via "Dark Reading: ".
Google spinoff Alphabet rolls out a new cloud-based security data platform that ultimately could displace some security tools in organizations.📖 Read
via "Dark Reading: ".
Dark Reading
Chronicle Releases Chapter One: Backstory
Google spinoff Alphabet rolls out a new cloud-based security data platform that ultimately could displace some security tools in organizations.
❌ BSides SF 2019: Remote-Root Bug in Logitech Harmony Hub Patched and Explained ❌
📖 Read
via "Threatpost".
Users of Logitech’s Harmony Hub get long-awaited answers about the critical bugs that left their home networks wide open to attack.📖 Read
via "Threatpost".
Threat Post
BSides SF 2019: Remote-Root Bug in Logitech Harmony Hub Patched and Explained
Users of Logitech’s Harmony Hub get long-awaited answers about the critical bugs that left their home networks wide open to attack.
🔐 Employees are the biggest risk to enterprise mobile device security, report says 🔐
📖 Read
via "Security on TechRepublic".
While mobile security risks have skyrocketed, 85% of organizations say they aren't doing enough to stay protected, according to a Verizon report.📖 Read
via "Security on TechRepublic".
TechRepublic
Employees are the biggest risk to enterprise mobile device security, report says
While mobile security risks have skyrocketed, 85% of organizations say they aren't doing enough to stay protected, according to a Verizon report.
⚠ Apple gets bug for free, while world sees first $1m bug hunter ⚠
📖 Read
via "Naked Security".
An Argentinian has garnered $1m in bug bounties, while a German researcher has given up on getting any bounty at all from Apple.📖 Read
via "Naked Security".
Naked Security
Apple gets bug for free, while HackerOne declares first $1m bug hunter
An Argentinian has garnered $1m in bug bounties, while a German researcher has given up on getting any bounty at all from Apple.
❌ RSAC 2019: Microsoft Zero-Day Allows Exploits to Sneak Past Sandboxes ❌
📖 Read
via "Threatpost".
Researchers say that Microsoft won't issue a patch for the issue.📖 Read
via "Threatpost".
Threat Post
RSAC 2019: Microsoft Zero-Day Allows Exploits to Sneak Past Sandboxes
Researchers say that Microsoft won't issue a patch for the issue.
⚠ Windows IoT Core exploitable via ethernet ⚠
📖 Read
via "Naked Security".
Microsoft's IoT version of Windows is vulnerable to an exploit that could give an attacker complete control of the system.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
❌ RSAC 2019: Malicious Emailed URLs See Triple-Digit Increase ❌
📖 Read
via "Threatpost".
At least 463,546 malicious URLs contained in the 28.4 million analyzed emails made it through to corporate in-boxes in Q4 of 2018.📖 Read
via "Threatpost".
Threat Post
RSAC 2019: Malicious Emailed URLs See Triple-Digit Increase
At least 463,546 malicious URLs contained in the 28.4 million analyzed emails made it through to corporate in-boxes in Q4 of 2018.
❌ RSAC 2019: Picking Apart the Foreshadow Attack ❌
📖 Read
via "Threatpost".
Raoul Strackx, one of the researchers who discovered the Foreshadow speculative execution vulnerability, talks at RSA about the Catch-22 issue when it comes to fixing speculative execution flaws.📖 Read
via "Threatpost".
Threat Post
RSA Conference 2019: Picking Apart the Foreshadow Attack
Raoul Strackx, one of the researchers who discovered the Foreshadow speculative execution vulnerability, talks at RSA about the Catch-22 issue when it comes to fixing speculative execution flaws.
⚠ Update now! Critical Adobe ColdFusion flaw now being exploited ⚠
📖 Read
via "Naked Security".
Adobe has issued an urgent patch for a critical flaw in the ColdFusion web development platform it says is being exploited in the wild.📖 Read
via "Naked Security".
Naked Security
Update now! Critical Adobe ColdFusion flaw now being exploited
Adobe has issued an urgent patch for a critical flaw in the ColdFusion web development platform it says is being exploited in the wild.
⚠ Comcast security nightmare: default ‘0000’ PIN on everybody’s account ⚠
📖 Read
via "Naked Security".
It didn't require an account PIN to switch carriers. Everybody uses 0000, it said, making it easier for customers… and phone hijackers.📖 Read
via "Naked Security".
Naked Security
Comcast security nightmare: default ‘0000’ PIN on everybody’s account
It didn’t require an account PIN to switch carriers. Everybody uses 0000, it said, making it easier for customers… and phone hijackers.
🕴 Incident Response: Having a Plan Isn't Enough 🕴
📖 Read
via "Dark Reading: ".
Data shows organizations neglect to review and update breach response plans as employees and processes change, putting data at risk.📖 Read
via "Dark Reading: ".
❌ RSAC 2019: Most Consumers Say ‘No’ to Cumbersome Data Privacy Practices ❌
📖 Read
via "Threatpost".
Consumer confidence in companies keeping their data safe is at an all-time low, but password hygiene and not reading EULAs and app permissions remain big problems.📖 Read
via "Threatpost".
Threat Post
RSAC 2019: Most Consumers Say ‘No’ to Cumbersome Data Privacy Practices
Consumer confidence in companies keeping their data safe is at an all-time low, but password hygiene and not reading EULAs and app permissions remain big problems.
🕴 Organizations Taking Less Time to Detect Breaches 🕴
📖 Read
via "Dark Reading: ".
But by the time they became aware, attackers have been on their networks for more than six months, new 2018 data shows.📖 Read
via "Dark Reading: ".
Darkreading
Organizations Taking Less Time to Detect Breaches
But by the time they became aware, attackers have been on their networks for more than six months, new 2018 data shows.
❌ RSAC 2019: Joomla! Mail Flaw Exploited to Create Mass Phishing Infrastructure ❌
📖 Read
via "Threatpost".
The Jmail Breaker attack leverages an old vulnerability in Joomla! along with a newly found flaw in the mail module.📖 Read
via "Threatpost".
Threat Post
RSAC 2019: Joomla! Flaw Exploited to Create Mass Phishing Infrastructure
The Jmail Breaker attack leverages an old vulnerability in Joomla! along with a newly found flaw in the mail module.
🕴 Axonius' 'Unsexy' Tool Wins RSAC Innovation Sandbox 🕴
📖 Read
via "Dark Reading: ".
Judges award top honor to new company solving an old, unsolved problem: asset discovery and management.📖 Read
via "Dark Reading: ".
⚠ Companies are flying blind on cybersecurity ⚠
📖 Read
via "Naked Security".
IT managers are flying blind in the battle to protect their companies from cyber attacks, according to a new Sophos survey.📖 Read
via "Naked Security".
Naked Security
Companies are flying blind on cybersecurity
IT managers are flying blind in the battle to protect their companies from cyber attacks, according to a new Sophos survey.
🔐 The public sector is a cyberattack magnet, manual processes are to blame 🔐
📖 Read
via "Security on TechRepublic".
More than half (51%) of respondents said their security teams spend more time on manual processes than handling vulnerabilities, according to a Tenable and Ponemon report.📖 Read
via "Security on TechRepublic".
TechRepublic
The public sector is a cyberattack magnet, manual processes are to blame
More than half (51%) of respondents said their security teams spend more time on manual processes than handling vulnerabilities, according to a Tenable and Ponemon report.
🕴 Artificial Intelligence: The Terminator of Malware 🕴
📖 Read
via "Dark Reading: ".
Is it possible that the combination of AI, facial recognition, and the coalescence of global mass-hack data could lead us toward a Skynet-like future?📖 Read
via "Dark Reading: ".
🕴 6 Questions to Ask While Buying a Connected Car 🕴
📖 Read
via "Dark Reading: ".
Here are six questions to keep in mind when you walk into the showroom to buy a networked car.📖 Read
via "Dark Reading: ".
🔐 Insider cyberthreats in government agencies hit all-time high, report says 🔐
📖 Read
via "Security on TechRepublic".
Untrained insiders and foreign governments create huge cybersecurity risks in government agencies, according to a SolarWinds report.📖 Read
via "Security on TechRepublic".
TechRepublic
Insider cyberthreats in government agencies hit all-time high, report says
Untrained insiders and foreign governments create huge cybersecurity risks in government agencies, according to a SolarWinds report.