🕴 12 AppSec Activities Enterprises Can't Afford to Skip 🕴
📖 Read
via "Dark Reading: ".
The latest Building Security in Maturity Model (BSIMM9) report offers a statistically backed, bare-minimum benchmark for software security initiatives.📖 Read
via "Dark Reading: ".
Dark Reading
12 AppSec Activities Enterprises Can't Afford to Skip
The latest Building Security in Maturity Model (BSIMM9) report offers a statistically backed, bare-minimum benchmark for software security initiatives.
❌ Threatpost New Wrap Podcast For Oct. 5 ❌
📖 Read
via "The first stop for security news | Threatpost ".
Threatpost editors discuss the highlights and biggest breaking news from this past week.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Threatpost New Wrap Podcast For Oct. 5
Threatpost editors discuss the highlights and biggest breaking news from this past week.
❌ D-Link Patches RCE Bugs in Wireless Access Point Gear ❌
📖 Read
via "The first stop for security news | Threatpost ".
D-Link has released the beta version of the controller which addresses the reported vulnerabilities.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
D-Link Patches RCE Bugs in Wireless Access Point Gear
D-Link has released the beta version of the controller which addresses the reported vulnerabilities.
🕴 Successful Scammers Call After Lunch 🕴
📖 Read
via "Dark Reading: ".
Analysis of 20,000 voice phishing, or vishing, calls reveals patterns in how hackers operate.📖 Read
via "Dark Reading: ".
Darkreading
Successful Scammers Call After Lunch
Analysis of 20,000 voice phishing, or vishing, calls reveals patterns in how social engineers operate and how targets respond.
❌ Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat ❌
📖 Read
via "The first stop for security news | Threatpost ".
A spyware attack on a Saudi dissident living in Canada made headlines this week, but Citizen Lab warns that simpler attacks are the real epidemic.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Virus Bulletin 2018: Saudi Dissident Spyware Attack Belies Bigger Threat
A spyware attack on a Saudi dissident living in Canada made headlines this week, but Citizen Lab warns that simpler attacks are the real epidemic.
🕴 Most Home Routers Are Full of Vulnerabilities 🕴
📖 Read
via "Dark Reading: ".
More than 80% of surveyed routers had, on average, 172 security vulnerabilities, new research shows.📖 Read
via "Dark Reading: ".
Dark Reading
Most Home Routers Are Full of Vulnerabilities
More than 80% of surveyed routers had, on average, 172 security vulnerabilities, new research shows.
❌ Sony Smart TV Bug Allows Remote Access, Root Privileges ❌
📖 Read
via "The first stop for security news | Threatpost ".
Software patching becomes a new reality for smart TV owners.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Sony Smart TV Bug Allows Remote Access, Root Privileges
Software patching becomes a new reality for smart TV owners.
🕴 Mandia: Tipping Point Now Here for Rules of Cyber Engagement 🕴
📖 Read
via "Dark Reading: ".
FireEye CEO and nation-state hacking expert Kevin Mandia says Russia began changing the game in 2015.📖 Read
via "Dark Reading: ".
Dark Reading
Mandia: Tipping Point Now Here for Rules of Cyber Engagement
FireEye CEO and nation-state hacking expert Kevin Mandia says Russia began changing the game in 2015.
🔐 Cybersecurity investments: Why ROI calculations may not tell the whole story 🔐
📖 Read
via "Security on TechRepublic".
Cybersecurity spends are about loss prevention not earnings, suggests security expert Bruce Schneier. Thankfully, there are better options to ensure cybersecurity investments are maximized.📖 Read
via "Security on TechRepublic".
ATENTION‼ New - CVE-2015-9273
📖 Read
via "National Vulnerability Database".
The wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-6710
📖 Read
via "National Vulnerability Database".
ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php.📖 Read
via "National Vulnerability Database".
❌ PoC Attack Escalates MikroTik Router Bug to ‘As Bad As It Gets’ ❌
📖 Read
via "The first stop for security news | Threatpost ".
Researchers say a medium severity bug should now be rated critical because of a new hack technique that allows for remote code execution on MikroTik edge and consumer routers.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
PoC Attack Escalates MikroTik Router Bug to ‘As Bad As It Gets’
Researchers say a medium severity bug should now be rated critical because of a new hack technique that allows for remote code execution on MikroTik edge and consumer routers.
⚠ Monday review – the hot 19 stories of the week ⚠
📖 Read
via "Naked Security".
From the iOS lockscreen bypass to Facebook using your 2FA phone number to target market you, and everything we wrote in between. Catch up with the news from the last seven days - it's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 19 stories of the week
From the iOS lockscreen bypass to Facebook using your 2FA phone number to target market you, and everything we wrote in between. Catch up with the news from the last seven days – it’s w…
⚠ Seven Russian cyberspies indicted for hacking, wire fraud, ID theft ⚠
📖 Read
via "Naked Security".
"Bungling" Russian GRU operatives picked up by Dutch police, linked to OPCW and World Anti-Doping Agency hacks.📖 Read
via "Naked Security".
Naked Security
Seven Russian cyberspies indicted for hacking, wire fraud, ID theft
“Bungling” Russian GRU operatives picked up by Dutch police, linked to OPCW and World Anti-Doping Agency hacks.
⚠ Fitbit data leads to arrest of 90-year-old in stepdaughter’s murder ⚠
📖 Read
via "Naked Security".
Her device recorded her heart rate slowing rapidly, then stopping about five minutes before her stepfather left the house.📖 Read
via "Naked Security".
Naked Security
Fitbit data leads to arrest of 90-year-old in stepdaughter’s murder
Her device recorded her heart rate slowing rapidly, then stopping about five minutes before her stepfather left the house.
⚠ Attackers use voicemail hack to steal WhatsApp accounts ⚠
📖 Read
via "Naked Security".
The Israeli National Cybersecurity Authority issued an alert warning that WhatsApp users could lose control of their accounts.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Phantom Secure CEO sold encrypted phones to drug cartels ⚠
📖 Read
via "Naked Security".
The CEO of “uncrackable” phone seller, Phantom Secure, has pleaded guilty to helping drug sellers keep their business locked away from the eyes of law enforcement.📖 Read
via "Naked Security".
Naked Security
Phantom Secure CEO sold encrypted phones to drug cartels
The CEO of “uncrackable” phone seller, Phantom Secure, has pleaded guilty to helping drug sellers keep their business locked away from the eyes of law enforcement.
🕴 Teach Your AI Well: A Potential New Bottleneck for Cybersecurity 🕴
📖 Read
via "Dark Reading: ".
Artificial intelligence (AI) holds the promise of easing the skills shortage in cybersecurity, but implementing AI may result in a talent gap of its own for the industry.📖 Read
via "Dark Reading: ".
Dark Reading
Teach Your AI Well: A Potential New Bottleneck for Cybersecurity
Artificial intelligence (AI) holds the promise of easing the skills shortage in cybersecurity, but implementing AI may result in a talent gap of its own for the industry.
🔐 5 tips to secure your supply chain from cyberattacks 🔐
📖 Read
via "Security on TechRepublic".
It's nearly impossible to secure supply chains from attacks like the alleged Chinese chip hack that was reported last week. But here are some tips to protect your company.📖 Read
via "Security on TechRepublic".
TechRepublic
5 tips to secure your supply chain from cyberattacks
It's nearly impossible to secure supply chains from attacks like the alleged Chinese chip hack that was reported last week. But here are some tips to protect your company.
⚠ Unpatched routers bad, doubly unpatched routers worse – much, much worse! ⚠
📖 Read
via "Naked Security".
Two bugs can be four times the trouble! If you missed the last Microtik router patch, you're at risk, but if you're *two* patches behind ...📖 Read
via "Naked Security".
Naked Security
Unpatched routers bad, doubly unpatched routers worse – much, much worse!
Two bugs can be four times the trouble! If you missed the last Microtik router patch, you’re at risk, but if you’re *two* patches behind …
ATENTION‼ New - CVE-2016-7475
📖 Read
via "National Vulnerability Database".
Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.📖 Read
via "National Vulnerability Database".