🕴 Phishing Campaign Uses SharePoint to Slip Past Defenses 🕴
📖 Read
via "Dark Reading: ".
Cybercriminals targeting financial institutions in the UK bypassed Symantec email gateway and other perimeter technologies.📖 Read
via "Dark Reading: ".
Darkreading
Phishing Campaign Uses SharePoint to Slip Past Defenses
Cybercriminals targeting financial institutions in the UK bypassed Symantec email gateway and other perimeter technologies.
❌ Android Zero-Day Bug Opens Door to Privilege Escalation Attack, Researchers Warn ❌
📖 Read
via "Threatpost".
The zero-day vulnerability could enable privilege escalation, and is not part of Google's Android September security update.📖 Read
via "Threatpost".
Threat Post
Android Zero-Day Bug Opens Door to Privilege Escalation Attack, Researchers Warn
The zero-day vulnerability could enable privilege escalation, and is not part of Google's Android September security update.
🕴 5G Standard to Get New Security Specifications 🕴
📖 Read
via "Dark Reading: ".
Researchers had recently demonstrated how attackers could intercept device capability information and use it against 5G mobile subscribers.📖 Read
via "Dark Reading: ".
Dark Reading
5G Standard to Get New Security Specifications
Researchers had recently demonstrated how attackers could intercept device capability information and use it against 5G mobile subscribers.
🕴 Meet FPGA: The Tiny, Powerful, Hackable Bit of Silicon at the Heart of IoT 🕴
📖 Read
via "Dark Reading: ".
Field-Programmable Gate Arrays are flexible, agile-friendly components that populate many infrastructure and IoT devices -- and have recently become the targets of researchers finding vulnerabilities.📖 Read
via "Dark Reading: ".
Dark Reading
Meet FPGA: The Tiny, Powerful, Hackable Bit of Silicon at the Heart of IoT
Field-Programmable Gate Arrays are flexible, agile-friendly components that populate many infrastructure and IoT devices -- and have recently become the targets of researchers finding vulnerabilities.
⚠ S2 Ep7: iPhone attack, Twitter hack and Android bots – Naked Security Podcast ⚠
📖 Read
via "Naked Security".
Episode 7 of the Naked Security podcast is available now!📖 Read
via "Naked Security".
Naked Security
S2 Ep7: iPhone attack, Twitter hack and Android bots – Naked Security Podcast
Episode 7 of the Naked Security podcast is available now!
❌ Leaky Server Exposes 419M Phone Numbers of Facebook Users ❌
📖 Read
via "Threatpost".
Server lacked password protection and included multiple databases with records from the U.S., U.K. and Vietnam.📖 Read
via "Threatpost".
Threat Post
Leaky Server Exposes 419M Phone Numbers of Facebook Users
Server lacked password protection and included multiple databases with records from the U.S., U.K. and Vietnam.
⚠ Author of record-setting IoT botnets pleads guilty ⚠
📖 Read
via "Naked Security".
He kept working on new botnets (and swatting a co-conspirator-cum-competitor) while indicted and on supervised release.📖 Read
via "Naked Security".
Naked Security
Author of record-setting IoT botnets pleads guilty
He kept working on new botnets (and swatting a co-conspirator-cum-competitor) while indicted and on supervised release.
⚠ Android gets September update as price of flaws soars ⚠
📖 Read
via "Naked Security".
When is a security update not a security update? When it’s patching flaws in a version of an OS nobody beyond developers is yet running.📖 Read
via "Naked Security".
Naked Security
Android gets September update as price of flaws soars
When is a security update not a security update? When it’s patching flaws in a version of an OS nobody beyond developers is yet running.
🕴 It's Not Healthy to Confuse Compliance with Security 🕴
📖 Read
via "Dark Reading: ".
Healthcare organizations should be alarmed by the frequency and severity of cyberattacks. Don't assume you're safe from them just because you're compliant with regulations.📖 Read
via "Dark Reading: ".
Dark Reading
It's Not Healthy to Confuse Compliance with Security
Healthcare organizations should be alarmed by the frequency and severity of cyberattacks. Don't assume you're safe from them just because you're compliant with regulations.
⚠ Firefox won’t follow Chrome’s anti-ad-blocker changes, says Mozilla ⚠
📖 Read
via "Naked Security".
Mozilla has told developers not to fret - it won't follow Google in tweaking its browser to be unfriendly to ad blocking software.📖 Read
via "Naked Security".
Naked Security
Firefox won’t follow Chrome’s anti-ad-blocker changes, says Mozilla
Mozilla has told developers not to fret – it won’t follow Google in tweaking its browser to be unfriendly to ad blocking software.
⚠ Scammers deepfake CEO’s voice to talk underling into $243,000 transfer ⚠
📖 Read
via "Naked Security".
The voice had the hint of a German accent and the same “melody” that a UK CEO recognized in his boss's voice.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Raspberry Pi blasted into space, sends back video of Earth ⚠
📖 Read
via "Naked Security".
Got a Pi? Here's a cool project idea for you...📖 Read
via "Naked Security".
Naked Security
Raspberry Pi blasted into space, sends back video of Earth
Got a Pi? Here’s a cool project idea for you…
❌ $5.3M Ransomware Demand: Massachusetts City Says No Thanks ❌
📖 Read
via "Threatpost".
After being hit by a ransomware attack, Massachusetts city New Bedford faced a payout demand of more than $5 million - one of the latest known ransoms ever.📖 Read
via "Threatpost".
Threat Post
$5.3M Ransomware Demand: Massachusetts City Says No Thanks
After being hit by a ransomware attack, Massachusetts city New Bedford faced a payout demand of more than $5 million - one of the latest known ransoms ever.
🕴 419M Facebook User Phone Numbers Publicly Exposed 🕴
📖 Read
via "Dark Reading: ".
It's still unclear who owned the server storing hundreds of millions of records online without a password.📖 Read
via "Dark Reading: ".
Dark Reading
419M Facebook User Phone Numbers Publicly Exposed
It's still unclear who owned the server storing hundreds of millions of records online without a password.
ATENTION‼ New - CVE-2018-18370 (advanced_secure_gateway, proxysg)
📖 Read
via "National Vulnerability Database".
The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. A stored cross-site scripting (XSS) vulnerability in the WebFTP mode allows a remote attacker to inject malicious JavaScript code in ASG/ProxySG's web listing of a remote FTP server. Exploiting the vulnerability requires the attacker to be able to upload crafted files to the remote FTP server. Affected versions: ASG 6.6 and 6.7 prior to 6.7.4.2; ProxySG 6.5 prior to 6.5.10.15, 6.6, and 6.7 prior to 6.7.4.2.📖 Read
via "National Vulnerability Database".
🕴 Crimeware: How Criminals Built a Business to Target Businesses 🕴
📖 Read
via "Dark Reading: ".
A new report investigates the evolution of crimeware, how businesses underestimate the threat, and why they should be concerned.📖 Read
via "Dark Reading: ".
Darkreading
Crimeware: How Criminals Built a Business to Target Businesses
A new report investigates the evolution of crimeware, how businesses underestimate the threat, and why they should be concerned.
🔏 DoD To Launch New IP Policy Group 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The team will be tasked with better protecting U.S. IP from data theft; it will also issue and oversee new policies around data rights and how military IP is allocated in the DoD's contracting and acquisition stages.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
DoD To Launch New IP Policy Group
The team will be tasked with better protecting U.S. IP from data theft; it will also issue and oversee new policies around data rights and how military IP is allocated in the DoD's contracting and acquisition stages.
🕴 Automation: Friend of the SOC Analyst 🕴
📖 Read
via "Dark Reading: ".
Faced by increasingly sophisticated threats, organizations are realizing the benefits of automation in their cybersecurity programs.📖 Read
via "Dark Reading: ".
Darkreading
Automation: Friend of the SOC Analyst
Faced by increasingly sophisticated threats, organizations are realizing the benefits of automation in their cybersecurity programs.
ATENTION‼ New - CVE-2018-11569
📖 Read
via "National Vulnerability Database".
Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.📖 Read
via "National Vulnerability Database".
🕴 Attackers Hit Ceiling in Ransomware Demands 🕴
📖 Read
via "Dark Reading: ".
New Bedford, Massachusetts' refusal to pay a $5.3 million ransom highlights how victim towns and cities may be hitting the limit to what they're willing to spend to speed recovery.📖 Read
via "Dark Reading: ".
Dark Reading
Cyberattacks & Data Breaches recent news | Dark Reading
Explore the latest news and expert commentary on Cyberattacks & Data Breaches, brought to you by the editors of Dark Reading