🕴 Cybersecurity Industry Leaders Launch Campaign to Close the Cybersecurity Talent Gap 🕴
📖 Read
via "Dark Reading".
A coalition of over 25 industry leaders, led by NightDragon and non-profit NextGen Cyber Talent, partner to raise $1 million for collegiate cybersecurity education📖 Read
via "Dark Reading".
Dark Reading
Cybersecurity Industry Leaders Launch Campaign to Close the Cybersecurity Talent Gap
A coalition of over 25 industry leaders, led by NightDragon and non-profit NextGen Cyber Talent, partner to raise $1 million for collegiate cybersecurity education
🕴 CyberRatings.org Announces Test on Cloud Network Firewall 🕴
📖 Read
via "Dark Reading".
Fortinet FortiGate-VM receives AAA rating across all five categories in CyberRating's assessment.📖 Read
via "Dark Reading".
Dark Reading
CyberRatings.org Announces Test on Cloud Network Firewall
Fortinet FortiGate-VM receives AAA rating across all five categories in CyberRating's assessment.
🕴 Forescout Announces Intent to Acquire Cysiv to Deliver Data-Powered Threat Detection and Response 🕴
📖 Read
via "Dark Reading".
Acquisition will leverage Forescout’s automated cybersecurity with Cysiv's cloud-native platform to deliver data-powered analytics for 24/7 threat detection and response.📖 Read
via "Dark Reading".
Dark Reading
Forescout Announces Intent to Acquire Cysiv to Deliver Data-Powered Threat Detection and Response
Acquisition will leverage Forescout’s automated cybersecurity with Cysiv's cloud-native platform to deliver data-powered analytics for 24/7 threat detection and response.
❌ Cyber Risk Retainers: Not Another Insurance Policy ❌
📖 Read
via "Threat Post".
The costs associated with a cyberattack can be significant, especially if a company does not have an Incident Response plan that addresses risk.📖 Read
via "Threat Post".
Threat Post
Cyber Risk Retainers: Not Another Insurance Policy
The costs associated with a cyberattack can be significant, especially if a company does not have an Incident Response plan that addresses risk.
🗓️ HTTP/3 evolves into RFC 9114 – a security advantage, but not without challenges 🗓️
📖 Read
via "The Daily Swig".
The backbone of the internet has received a major upgrade📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
HTTP/3 evolves into RFC 9114 – a security advantage, but not without challenges
The backbone of the web has received a major upgrade
👍1
🕴 7 NFT Scams That Could Be Targeting Your Brand 🕴
📖 Read
via "Dark Reading".
Brands should be vigilant to ensure sites and listings promoting NFTs for sale are legitimate and not being used as an instrument by fraudsters to swindle customers.📖 Read
via "Dark Reading".
Dark Reading
7 NFT Scams That Could Be Targeting Your Brand
Brands should be vigilant to ensure sites and listings promoting NFTs for sale are legitimate and not being used as an instrument by fraudsters to swindle customers.
🕴 Akamai Launches New Malware Protection for Uploaded Files 🕴
📖 Read
via "Dark Reading".
Edge-based solution detects and blocks malicious files uploaded to Web apps and APIs.📖 Read
via "Dark Reading".
Dark Reading
Akamai Launches New Malware Protection for Uploaded Files
Edge-based solution detects and blocks malicious files uploaded to Web apps and APIs.
🕴 Harnessing AI to Proactively Thwart Threats 🕴
📖 Read
via "Dark Reading".
By using artificial intelligence to predict how an attacker would carry out their attack, we can deploy defenses and preemptively shut down vulnerable entry points.📖 Read
via "Dark Reading".
Dark Reading
Harnessing AI to Proactively Thwart Threats
By using artificial intelligence to predict how an attacker would carry out their attack, we can deploy defenses and preemptively shut down vulnerable entry points.
‼ CVE-2022-1991 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo "><img src="" onerror="alert(document.cookie)"> leads to cross site scripting. It is possible to launch the attack remotely but it requires authentication. Exploit details have been disclosed to the public.📖 Read
via "National Vulnerability Database".
♟️ KrebsOnSecurity in New Netflix Series on Cybercrime ♟️
📖 Read
via "Krebs on Security".
Netflix has a new documentary series airing next week -- "Web of Make Believe: Death, Lies & the Internet" -- in which Yours Truly apparently has a decent amount of screen time. The debut episode explores the far-too-common harassment tactic of "swatting" -- wherein fake bomb threats or hostage situations are phoned in to police as part of a scheme to trick them into visiting potentially deadly force on a target’s address.📖 Read
via "Krebs on Security".
Krebs on Security
KrebsOnSecurity in New Netflix Series on Cybercrime
Netflix has a new documentary series airing next week -- "Web of Make Believe: Death, Lies & the Internet" -- in which Yours Truly apparently has a decent amount of screen time. The debut episode explores the far-too-common harassment tactic…
🗓️ Google showers top cloud security researchers with kudos and cash 🗓️
📖 Read
via "The Daily Swig".
More than $300,000 was handed out in GCP prize money during 2021📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Google showers top cloud security researchers with kudos and cash
More than $300,000 was handed out in GCP prize money during 2021
🕴 Enterprise Security Around the Dinner Table 🕴
📖 Read
via "Dark Reading".
Enterprise cybersecurity awareness training has evolved to include informal lessons for employees’ family members, and it has many benefits.📖 Read
via "Dark Reading".
Dark Reading
Enterprise Security Around the Dinner Table
Enterprise cybersecurity awareness training has evolved to include informal lessons for employees' family members, and it has many benefits.
⚠ Know your enemy! Learn how cybercrime adversaries get in… ⚠
📖 Read
via "Naked Security".
Here's how 144 recent attacks actually went down in real life. Don't let this happen to you!📖 Read
via "Naked Security".
Naked Security
Know your enemy! Learn how cybercrime adversaries get in…
Here’s how 144 recent attacks actually went down in real life. Don’t let this happen to you!
‼ CVE-2022-31025 ‼
📖 Read
via "National Vulnerability Database".
Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the `stable` branch and 2.9.0beta5 on the `beta` and `tests-passed` branches, inviting users on sites that use single sign-on could bypass the `must_approve_users` check and invites by staff are always approved automatically. The issue is patched in Discourse version 2.8.4 on the `stable` branch and version `2.9.0.beta5` on the `beta` and `tests-passed` branches. As a workaround, disable invites or increase `min_trust_level_to_allow_invite` to reduce the attack surface to more trusted users.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29564 ‼
📖 Read
via "National Vulnerability Database".
Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in the internal infrastructure, aka WND-44801.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25361 ‼
📖 Read
via "National Vulnerability Database".
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31495 ‼
📖 Read
via "National Vulnerability Database".
LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-37589 ‼
📖 Read
via "National Vulnerability Database".
Virtua Cobranca before 12R allows SQL Injection on the login page.📖 Read
via "National Vulnerability Database".
🕴 How the C-Suite Puts Shoulders Into Zero Trust in 2022 🕴
📖 Read
via "Dark Reading".
A full 77% of tech executives say they'll increase spending in zero-trust architecture in the coming year.📖 Read
via "Dark Reading".
Dark Reading
How the C-Suite Puts Shoulders Into Zero Trust in 2022
A full 77% of tech executives say they'll increase spending in zero-trust architecture in the coming year.
🕴 RSAC Opens With Message of Transformation 🕴
📖 Read
via "Dark Reading".
Cybersecurity needs to shift its thinking ahead of the next disruption, RSA's CEO said during the opening 2022 conference keynote.📖 Read
via "Dark Reading".
Dark Reading
RSAC Opens With Message of Transformation
Cybersecurity needs to shift its thinking ahead of the next disruption, RSA's CEO said during the opening 2022 conference keynote.
‼ CVE-2022-31028 ‼
📖 Read
via "National Vulnerability Database".
MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with version RELEASE.2022-06-02T02-11-04Z, MinIO is vulnerable to an unending go-routine buildup while keeping connections established due to HTTP clients not closing the connections. Public-facing MinIO deployments are most affected. Users should upgrade to RELEASE.2022-06-02T02-11-04Z to receive a patch. One possible workaround is to use a reverse proxy to limit the number of connections being attempted in front of MinIO, and actively rejecting connections from such malicious clients.📖 Read
via "National Vulnerability Database".