♟️ How Phishers Are Slinking Their Links Into LinkedIn ♟️
📖 Read
via "Krebs on Security".
If you received a link to LinkedIn.com via email, SMS or instant message, would you click it? Spammers, phishers and other ne'er-do-wells are hoping you will, because they've long taken advantage of a marketing feature on the business networking site which lets them create a LinkedIn.com link that bounces your browser to other websites, such as phishing pages that mimic top online brands (but chiefly Linkedin's parent firm Microsoft).📖 Read
via "Krebs on Security".
Krebsonsecurity
How Phishers Are Slinking Their Links Into LinkedIn
If you received a link to LinkedIn.com via email, SMS or instant message, would you click it? Spammers, phishers and other ne'er-do-wells are hoping you will, because they've long taken advantage of a marketing feature on the business networking site…
🕴 Big Pharma Finds Patch Management a Bitter Pill 🕴
📖 Read
via "Dark Reading".
One-quarter of pharmaceutical manufacturers received a failing grade on patch management, which is a vital step in heading off ransomware attacks.📖 Read
via "Dark Reading".
Dark Reading
Big Pharma Finds Patch Management a Bitter Pill
One-quarter of pharmaceutical manufacturers received a failing grade on patch management, which is a vital step in heading off ransomware attacks.
🕴 Simplifying Zero Trust Security in Healthcare Organizations 🕴
📖 Read
via "Dark Reading".
Healthcare organizations are increasingly looking at zero trust to help deter ransomware attacks, safeguard PHI, and prevent downtime.📖 Read
via "Dark Reading".
Dark Reading
Simplifying Zero Trust Security in Healthcare Organizations
Healthcare organizations are increasingly looking at zero trust to help deter ransomware attacks, safeguard PHI, and prevent downtime.
🔏 A Cyber NTSB: DHS Announces Cyber Review Board 🔏
📖 Read
via "".
The board will investigate breaches and vulnerabilities to find out why they happened and how to prevent them from happening again.📖 Read
via "".
Digital Guardian
A Cyber NTSB: DHS Announces Cyber Review Board
The board will investigate breaches and vulnerabilities to find out why they happened and how to prevent them from happening again.
❌ Critical Cisco Bugs Open VPN Routers to Cyberattacks ❌
📖 Read
via "Threat Post".
The company's RV line of small-business routers contains 15 different security vulnerabilities that could enable everything from RCE to corporate network access and denial-of-service – and many have exploits circulating.📖 Read
via "Threat Post".
Threat Post
Critical Cisco Bugs Open VPN Routers to Cyberattacks
The RV line of small-business routers contains 15 flaws, some unpatched, that could enable RCE, corporate network access or DoS – and many have exploits circulating.
‼ CVE-2022-24307 ‼
📖 Read
via "National Vulnerability Database".
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)📖 Read
via "National Vulnerability Database".
🕴 Microsoft: Multifactor Adoption Remains Low 🕴
📖 Read
via "Dark Reading".
New data shows a slow roll to strong authentication for most enterprise Windows systems.📖 Read
via "Dark Reading".
Dark Reading
Microsoft: Multifactor Adoption Remains Low
New data shows a slow roll to strong authentication for most enterprise Windows systems.
🕴 Research From Quantum and ESG Reveals Top Challenges in Data Management 🕴
📖 Read
via "Dark Reading".
Unstructured data management, storage complexity and cost remain barriers to adoption, resulting in valuable data being discarded or mismanaged.📖 Read
via "Dark Reading".
Dark Reading
Research From Quantum and ESG Reveals Top Challenges in Data Management
Unstructured data management, storage complexity and cost remain barriers to adoption, resulting in valuable data being discarded or mismanaged.
🕴 Menlo Security Finds Cloud Migration and Remote Work Gives Rise to New Era of Malware, Highly Evasive Adaptive Threats (HEAT) 🕴
📖 Read
via "Dark Reading".
Menlo identified 224% increase in HEAT attacks in the last six months fueling ransomware surge.📖 Read
via "Dark Reading".
Dark Reading
Menlo Security Finds Cloud Migration and Remote Work Gives Rise to New Era of Malware, Highly Evasive Adaptive Threats (HEAT)
Menlo identified 224% increase in HEAT attacks in the last six months fueling ransomware surge.
🕴 DHS Launches Cyber Safety Review Board to Analyze Major Vulnerability Events 🕴
📖 Read
via "Dark Reading".
The US Department of Homeland Security has named a 15-member review board to assess significant cybersecurity events and recommend improvements - starting with the Log4J vulnerability.📖 Read
via "Dark Reading".
Dark Reading
DHS Launches Cyber Safety Review Board to Analyze Major Vulnerability Events
The US Department of Homeland Security has named a 15-member review board to assess significant cybersecurity events and recommend improvements - starting with the Log4J vulnerability.
❌ Low-Detection Phishing Kits Increasingly Bypass MFA ❌
📖 Read
via "Threat Post".
A growing class of phishing kits – transparent reverse proxy kits – are being used to get past multi-factor authentication using MiTM tactics.📖 Read
via "Threat Post".
Threat Post
Low-Detection Phishing Kits Increasingly Bypass MFA
A growing class of phishing kits – transparent reverse proxy kits – are being used to get past multi-factor authentication using MiTM tactics.
🕴 Several India-Based Call Centers Indicted by US DoJ 🕴
📖 Read
via "Dark Reading".
"Scam robocall" operators face charges for defrauding US citizens.📖 Read
via "Dark Reading".
Dark Reading
Several India-Based Call Centers Indicted by US DoJ
"Scam robocall" operators face charges for defrauding US citizens.
🕴 The Future of Cybersecurity: Our Predictions for 2022 🕴
📖 Read
via "Dark Reading".
New technologies and workplace trends are fueling a global explosion in cybercrime. Discover the threats to watch out for in 2022.📖 Read
via "Dark Reading".
Dark Reading
The Future of Cybersecurity: Our Predictions for 2022
New technologies and workplace trends are fueling a global explosion in cybercrime. Discover the threats to watch out for in 2022.
🕴 Tenable Launches Suite of New Features to Cloud-Native Application Security Platform 🕴
📖 Read
via "Dark Reading".
Tenable.cs enhancements secure cloud resources, container images, and cloud assets📖 Read
via "Dark Reading".
Dark Reading
Tenable Launches Suite of New Features to Cloud-Native Application Security Platform
Tenable.cs enhancements secure cloud resources, container images, and cloud assets
🕴 Mandiant Bolsters SaaS Platform With Integration of New Attack Surface Management Module 🕴
📖 Read
via "Dark Reading".
New automated offering helps organizations gain comprehensive visibility across IT environments, continuously monitor for vulnerabilities, operationalize threat intelligence and manage risk.📖 Read
via "Dark Reading".
Dark Reading
Mandiant Bolsters SaaS Platform With Integration of New Attack Surface Management Module
New automated offering helps organizations gain comprehensive visibility across IT environments, continuously monitor for vulnerabilities, operationalize threat intelligence and manage risk.
❌ Kronos Still Dragging Itself Back From Ransomware Hell ❌
📖 Read
via "Threat Post".
And customers including Tesla, PepsiCo and NYC transit workers are filing lawsuits over the “real pain in the rear end” of manual inputting, inaccurate wages & more.📖 Read
via "Threat Post".
Threat Post
Kronos Still Dragging Itself Back From Ransomware Hell
UPDATE: Puma was one of the companies from which employees' personal data was stolen. Customers including Tesla, PepsiCo and NYC transit workers are filing lawsuits over the “real pain in the rear end” of manual inputting, inaccurate wages & more.
‼ CVE-2021-45268 ‼
📖 Read
via "National Vulnerability Database".
A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file.📖 Read
via "National Vulnerability Database".
🕴 Mac Malware-Dropping Adware Gets More Dangerous 🕴
📖 Read
via "Dark Reading".
The authors of UpdateAgent have tweaked it yet again — for the fifth time in less than 18 months.📖 Read
via "Dark Reading".
Dark Reading
Mac Malware-Dropping Adware Gets More Dangerous
The authors of UpdateAgent have tweaked it yet again — for the fifth time in less than 18 months.
‼ CVE-2022-24153 ‼
📖 Read
via "National Vulnerability Database".
Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function formAddMacfilterRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the devName parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-45989 ‼
📖 Read
via "National Vulnerability Database".
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service (DoS) via the qosGuestUpstream and qosGuestDownstream parameters.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-45987 ‼
📖 Read
via "National Vulnerability Database".
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter.📖 Read
via "National Vulnerability Database".