❌ Virus Bulletin 2019: Japanese Attacks Highlight Savvy APT Strategy ❌
📖 Read
via "Threatpost".
Multiyear campaigns stretching back to at least 2014 have been seen using zero-days in region-specific software.📖 Read
via "Threatpost".
Threat Post
Virus Bulletin 2019: Japanese Attacks Highlight Savvy APT Strategy
Multiyear campaigns stretching back to at least 2014 have been seen using zero-days in region-specific software.
🕴 Google's 'Password Checkup' Tool Tells You When Passwords Are Leaked 🕴
📖 Read
via "Dark Reading: ".
The feature will check the strength of saved passwords and alert users when they're compromised in a breach.📖 Read
via "Dark Reading: ".
Dark Reading
Google's 'Password Checkup' Tool Tells You When Passwords Are Leaked
The feature will check the strength of saved passwords and alert users when they're compromised in a breach.
❌ Virus Bulletin 2019: Geost Android Botnet Goes After Millions of Euros ❌
📖 Read
via "Threatpost".
Bad OpSec led to the botnet's discovery -- revealing 800,000 victims in Russia.📖 Read
via "Threatpost".
Threat Post
Virus Bulletin 2019: Geost Android Botnet Goes After Millions of Euros
Bad OpSec led to the botnet's discovery — revealing 800,000 victims in Russia.
🕴 Quantum-Safe Cryptography: The Time to Prepare Is Now 🕴
📖 Read
via "Dark Reading: ".
Quantum computing is real and it's evolving fast. Is the security industry up to the challenge?📖 Read
via "Dark Reading: ".
Darkreading
Quantum-Safe Cryptography: The Time to Prepare Is Now
Quantum computing is real and it's evolving fast. Is the security industry up to the challenge?
🔏 Employee Accessed, Abused Customer Data at American Express 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
An employee - since terminated - at the financial services corporation is being investigated for fraud after accessing and stealing cardholder data.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Employee Accessed, Abused Customer Data at American Express
An employee - since terminated - at the financial services corporation is being investigated for fraud after accessing and stealing cardholder data.
❌ Why This New Cybergang is Heralding a New Age For BEC ❌
📖 Read
via "Threatpost".
Cybergang Silent Starling is taking BEC to the next level by targeting suppliers and going after their customers.📖 Read
via "Threatpost".
Threat Post
Why This New Cybergang is Heralding a New Age For BEC
Cybergang Silent Starling is taking BEC to the next level by targeting suppliers and going after their customers.
🕴 New Silent Starling Attack Group Puts Spin on BEC 🕴
📖 Read
via "Dark Reading: ".
The West African cybergang has successfully infiltrated more than 500 companies using a tactic dubbed 'vendor email compromise.'📖 Read
via "Dark Reading: ".
Darkreading
New Silent Starling Attack Group Puts Spin on BEC
The West African cybergang has successfully infiltrated more than 500 companies using a tactic dubbed 'vendor email compromise.'
🕴 Millions More Embedded Devices Contain Vulnerable IPnet Software 🕴
📖 Read
via "Dark Reading: ".
FDA, DHS issue fresh warnings on easily exploitable URGENT/11 flaws in medical, SCADA systems, industrial controllers, and other devices.📖 Read
via "Dark Reading: ".
Dark Reading
Millions More Embedded Devices Contain Vulnerable IPnet Software
FDA, DHS issue fresh warnings on easily exploitable URGENT/11 flaws in medical, SCADA systems, industrial controllers, and other devices.
🛠 PDFGrab 0.4.4 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
pdfgrab is a python script that analyzes pdf files to extract their metadata. You can direct it to analyze a single file, a directory of pdfs, provide it a url, or have it leverage googlesearch to get pdfs at a target site.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
PDFGrab 0.4.4 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Clam AntiVirus Toolkit 0.102.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Clam AntiVirus is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a command-line scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Clam AntiVirus Toolkit 0.102.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
ATENTION‼ New - CVE-2019-10212
📖 Read
via "National Vulnerability Database".
A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.📖 Read
via "National Vulnerability Database".
❌ Zendesk Exposes 10,000 Accounts to Unknown Third Party ❌
📖 Read
via "Threatpost".
Zendesk says access occurred in 2016 and that only a small percentage of customers were impacted.📖 Read
via "Threatpost".
Threat Post
Zendesk Exposes 10,000 Accounts to Unknown Third Party
Zendesk says access occurred in 2016 and that only a small percentage of customers were impacted.
🕴 Stalkware on the Rise Globally 🕴
📖 Read
via "Dark Reading: ".
Stalkware is being installed on more and more victims' devices, and the trend is only accelerating, according to a new report.📖 Read
via "Dark Reading: ".
Darkreading
Stalkerware on the Rise Globally
Stalkware is being installed on more and more victims' devices, and the trend is only accelerating, according to a new report.
⚠ Ransomware attacks paralyze, and sometimes crush, hospitals ⚠
📖 Read
via "Naked Security".
New attacks on the perennially besieged sector have crippled hospitals in the US and Australia and caused one health clinic to shut down.📖 Read
via "Naked Security".
Naked Security
Ransomware attacks paralyze, and sometimes crush, hospitals
New attacks on the perennially besieged sector have crippled hospitals in the US and Australia and caused one health clinic to shut down.
🕴 How the City of Angels Is Tackling Cyber Devilry 🕴
📖 Read
via "Dark Reading: ".
A new mobile app makes a cybersecurity threat lab available to more small businesses in Los Angeles.📖 Read
via "Dark Reading: ".
Dark Reading
How the City of Angels Is Tackling Cyber Devilry
A new mobile app makes a cybersecurity threat lab available to more small businesses in Los Angeles.
⚠ Google’s Password Manager now checks for breached credentials ⚠
📖 Read
via "Naked Security".
Google has taken the next step in its strategy to secure users' passwords. The search giant has taken a password-checking feature released in February as an extension to its Chrome browser and embedded it directly into its password manager service.📖 Read
via "Naked Security".
Naked Security
Google’s Password Manager now checks for breached credentials
Google has taken the next step in its strategy to secure users’ passwords. The search giant has taken a password-checking feature released in February as an extension to its Chrome browser an…
🕴 Cartoon Contest: Second Wind 🕴
📖 Read
via "Dark Reading: ".
Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.📖 Read
via "Dark Reading: ".
Dark Reading
Cartoon Contest: Second Wind
Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.
⚠ PDF encryption standard weaknesses uncovered ⚠
📖 Read
via "Naked Security".
Researchers have discovered weaknesses in PDF encryption which could be exploited to reveal the plaintext contents of a file to an attacker.📖 Read
via "Naked Security".
Naked Security
PDF encryption standard weaknesses uncovered
Researchers have discovered weaknesses in PDF encryption which could be exploited to reveal the plaintext contents of a file to an attacker.
⚠ No federal privacy law will make it in the US this year, sources say ⚠
📖 Read
via "Naked Security".
Without one, the companies that collect our data will likely face compliance with California's take-no-prisoners law, in effect 1 January 2020.📖 Read
via "Naked Security".
Naked Security
No federal privacy law will make it in the US this year, sources say
Without one, the companies that collect our data will likely face compliance with California’s take-no-prisoners law, in effect 1 January 2020.
❌ WhatsApp Flaw Opens Android Devices to Remote Code Execution ❌
📖 Read
via "Threatpost".
A double-free bug could allow an attacker to achieve remote code execution; users are encouraged to update to a patched version of the messaging app.📖 Read
via "Threatpost".
Threat Post
WhatsApp Flaw Opens Android Devices to Remote Code Execution
A double-free bug could allow an attacker to achieve remote code execution; users encouraged to update to patched version of messaging app.
🕴 How FISMA Requirements Relate to Firmware Security 🕴
📖 Read
via "Dark Reading: ".
Federal guidelines can help all organizations pragmatically and meaningfully improve their firmware security.📖 Read
via "Dark Reading: ".
Darkreading
How FISMA Requirements Relate to Firmware Security
Federal guidelines can help all organizations pragmatically and meaningfully improve their firmware security.