❌ Ransomware Sees Triple-Digit Spike in Corporate Detections ❌
📖 Read
via "Threatpost".
A pair of reports released at Black Hat mark the huge shift away from targeting consumers.📖 Read
via "Threatpost".
Threat Post
Ransomware Sees Triple-Digit Spike in Corporate Detections
A pair of reports released at Black Hat mark the huge shift away from targeting consumers.
🕴 Yes, FaceApp Really Could Be Sending Your Data to Russia 🕴
📖 Read
via "Dark Reading: ".
FaceApp has an unprecedented level of access to data from 150 million users. What could its endgame be? We unpack three potential risks.📖 Read
via "Dark Reading: ".
Dark Reading
Yes, FaceApp Really Could Be Sending Your Data to Russia
FaceApp has an unprecedented level of access to data from 150 million users. What could its endgame be? We unpack three potential risks.
🔐 Russian phishing campaign using AWS to host landing pages designed to avoid detection 🔐
📖 Read
via "Security on TechRepublic".
Assets used as part of phishing campaigns are being hosted on AWS, with heavy XOR obfuscation to limit detection, according to a Proofpoint report.📖 Read
via "Security on TechRepublic".
TechRepublic
Russian phishing campaign using AWS to host landing pages designed to avoid detection
Assets used as part of phishing campaigns are being hosted on AWS, with heavy XOR obfuscation to limit detection, according to a Proofpoint report.
🔐 Ransomware attacks on businesses up 365% this year 🔐
📖 Read
via "Security on TechRepublic".
Cybercriminals are increasingly targeting businesses with ransomware instead of consumers for a bigger payout, according to Malwarebytes.📖 Read
via "Security on TechRepublic".
TechRepublic
Ransomware attacks on businesses up 365% this year
Cybercriminals are increasingly targeting businesses with ransomware instead of consumers for a bigger payout, according to Malwarebytes.
⚠ Update your iPhone – remote control holes revealed by researchers ⚠
📖 Read
via "Naked Security".
You might not think your phone is as exposed as an internet server - but it's handling plenty of untrusted data from unknown sources!📖 Read
via "Naked Security".
Naked Security
Update your iPhone – remote control holes revealed by researchers
You might not think your phone is as exposed as an internet server – but it’s handling plenty of untrusted data from unknown sources!
❌ Researchers Bypass Apple FaceID Using Biometrics ‘Achilles Heel’ ❌
📖 Read
via "Threatpost".
Researchers were able to bypass Apple's FaceID using a pair of glasses with tape on the lenses.📖 Read
via "Threatpost".
Threat Post
Researchers Bypass Apple FaceID Using Biometrics ‘Achilles Heel’
Researchers were able to bypass Apple's FaceID using a pair of glasses with tape on the lenses.
🔐 Huawei doesn't see open source as the fix for spying accusations (but they should) 🔐
📖 Read
via "Security on TechRepublic".
The closed-source, opaque operation of network equipment makes spying accusations difficult to disprove. This could be solved by opening the software stack, but Huawei CSO Andy Purdy disagrees.📖 Read
via "Security on TechRepublic".
TechRepublic
Huawei doesn't see open source as the fix for spying accusations (but they should)
The closed-source, opaque operation of network equipment makes spying accusations difficult to disprove. This could be solved by opening the software stack, but Huawei CSO Andy Purdy disagrees.
ATENTION‼ New - CVE-2014-8184 (liblouis)
📖 Read
via "National Vulnerability Database".
A vulnerability was found in liblouis, versions 2.5.x before 2.5.4. A stack-based buffer overflow was found in findTable() in liblouis. An attacker could create a malicious file that would cause applications that use liblouis (such as Orca) to crash, or potentially execute arbitrary code when opened.📖 Read
via "National Vulnerability Database".
🕴 Siemens S7 PLCs Share Same Crypto Key Pair, Researchers Find 🕴
📖 Read
via "Dark Reading: ".
Researchers at Black Hat USA reveal how security authentication weaknesses in popular Siemens ICS family let them control a PLC.📖 Read
via "Dark Reading: ".
Dark Reading
Siemens S7 PLCs Share Same Crypto Key Pair, Researchers Find
Researchers at Black Hat USA reveal how security authentication weaknesses in popular Siemens ICS family let them control a PLC.
❌ Critical RCE Bug Found Lurking in Avaya VoIP Phones ❌
📖 Read
via "Threatpost".
The vulnerability is a decade old with a public exploit, yet remained unpatched in one of the phone giant's most popular models.📖 Read
via "Threatpost".
Threat Post
Critical RCE Bug Found Lurking in Avaya VoIP Phones
The vulnerability is a decade old with a public exploit, yet remained unpatched in one of the phone giant's most popular models.
❌ Black Hat 2019: Addressing Supply-Chain Risk Starts with People, Microsoft Says ❌
📖 Read
via "Threatpost".
LAS VEGAS – Supply-chain attacks have nabbed headlines lately thanks to high-profile incidents like the Wipro news last April, where attackers were able to compromise the staffing agency’s network and pivot to their customers. That incident pointed out that supply-chain risk should be thought of in a much more holistic fashion than it usually is, […]📖 Read
via "Threatpost".
Threat Post
Black Hat 2019: Addressing Supply-Chain Risk Starts with People, Microsoft Says
Hardware, software, services and people make up supply-chain risk — but the latter should be the guiding focus.
❌ State Farm Falls Victim to Credential-Stuffing Attack ❌
📖 Read
via "Threatpost".
The insurance giant serves at least 83 million U.S. households.📖 Read
via "Threatpost".
Threat Post
State Farm Falls Victim to Credential-Stuffing Attack
The insurance giant serves at least 83 million U.S. households.
🔏 Using GDPR Subject Access Requests to Harvest Data 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
In a talk at this year's Black Hat an Oxford University student explained how he used GDPR Access Requests and a Python script to steal a slew of sensitive information on another person.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Using GDPR Subject Access Requests to Harvest Data
In a talk at this year's Black Hat an Oxford University student explained how he used GDPR Access Requests and a Python script to steal a slew of sensitive information on another person.
🕴 Ransomware Shifts Focus from Consumers to Businesses 🕴
📖 Read
via "Dark Reading: ".
In addition, ransomware seems likely to continue its evolution in the second half of 2019.📖 Read
via "Dark Reading: ".
Darkreading
Ransomware Shifts Focus from Consumers to Businesses
In addition, ransomware seems likely to continue its evolution in the second half of 2019.
ATENTION‼ New - CVE-2015-9292
📖 Read
via "National Vulnerability Database".
6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).📖 Read
via "National Vulnerability Database".
🕴 How Behavioral Data Shaped a Security Training Makeover 🕴
📖 Read
via "Dark Reading: ".
A new program leveraged behavioral data of employees to determine when they excelled at security and where they needed improvement.📖 Read
via "Dark Reading: ".
Dark Reading
How Behavioral Data Shaped a Security Training Makeover
A new program leveraged behavioral data of employees to determine when they excelled at security and where they needed improvement.
🕴 Equifax CISO: 'Trust Starts and Ends with You' 🕴
📖 Read
via "Dark Reading: ".
Organizational culture is key to good enterprise security posture, Jamil Farshchi told Black Hat attendees.📖 Read
via "Dark Reading: ".
Darkreading
Equifax CISO: 'Trust Starts and Ends with You'
Organizational culture is key to good enterprise security posture, Jamil Farshchi told Black Hat attendees.
❌ Apple Upgrades Bug Bounty Program: Adds Macs, $1M Reward ❌
📖 Read
via "Threatpost".
Apple is opening its once-private bug bounty program to all researchers, as well as boosting vulnerability payouts and expanding the product scope to include MacOS.📖 Read
via "Threatpost".
Threat Post
Apple Upgrades Bug Bounty Program: Adds Macs, $1M Reward
Apple is opening its once-private bug bounty program to all researchers, as well as boosting vulnerability payouts and expanding the product scope to include MacOS.
🔐 Black Hat 2019: Social media influence campaigns, ATM hacking, and big business 🔐
📖 Read
via "Security on TechRepublic".
TechRepublic's Karen Roby interviews Dan Patterson about the top trends at the Black Hat USA 2019 cybersecurity conference.📖 Read
via "Security on TechRepublic".
TechRepublic
Black Hat 2019 trends: Social media influence campaigns, big business, ATM hacking
TechRepublic's Karen Roby interviews Dan Patterson about the top trends at the Black Hat USA 2019 cybersecurity conference.
🔐 Black Hat 2019 trends: Social media influence campaigns, big business, ATM hacking 🔐
📖 Read
via "Security on TechRepublic".
TechRepublic's Karen Roby interviews Dan Patterson about the top trends at the Black Hat USA 2019 cybersecurity conference.📖 Read
via "Security on TechRepublic".
TechRepublic
Black Hat 2019 trends: Social media influence campaigns, big business, ATM hacking
TechRepublic's Karen Roby interviews Dan Patterson about the top trends at the Black Hat USA 2019 cybersecurity conference.
🔐 Microsoft's new vulnerability tracking service is about IT productivity 🔐
📖 Read
via "Security on TechRepublic".
With so many threats and vulnerabilities to deal with, just knowing which actions you should prioritize can be hard. The new Threat & Vulnerability Management service from Microsoft should help.📖 Read
via "Security on TechRepublic".