LATEST NEWS
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 18, 2018
As I pull together the list of zero-day filters for this blog, I see all types of vulnerabilities from various vendors. My interest is …
In private briefings, U.S. government raises concerns over Huawei and ZTE
The U.S. government has been quietly warning technology companies about the security risks posed by doing business with Huawei and ZTE, two …
Beyond Correlation Rules: How to Build a Better SIEM
Derek Lin, chief data scientist, Exabeam Organizations have been using security information management – and later, security information …
Cylance Extends Endpoint Security Deployment Options
Cyber-security firm Cylance has had a busy week, announcing a $120 million funding round on June 19, a new alliance with KPMG on June 20 …
Security, privacy experts weigh in on the ICE doxxing
In what appears to be the latest salvo in a new, wired form of protest, developer Sam Lavigne posted code that scrapes LinkedIn to find …
ET Deals: Up Your Security Game with the Humble Cybersecurity Bundle
Internet service providers, black hats, government entities, and advertising companies alike are doing their best to compromise your …
“WannaCrypt” ransomware scam demands payment in advance!
What’s worse than ransomware that scrambles all your files and demands money for the key to unlock them and get them back? Well, WannaCry …
This Week in Security News: Macs, Hacks and Attacks
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few …
In Russia for World Cup? Beware of fake WiFi hotspots stealing user data
Justifying its name, in Evil twin, the access routes creates a cloned network with the same network name. Evil Twin works in the same way …
Bail Bond Company Let Bounty Hunters Track Verizon, T-Mobile, Sprint, and AT&T Phones for $7.50
This week Verizon and other major telcos announced they would stop the sale of customers’ location data to certain third parties. The …
Microsoft Edge bug could be exploited to spill your emails to malicious sites
A Google developer has discovered a high-severity loophole that affected the Microsoft Edge web browser and, less so, Mozilla Firefox, and …
Three-month-old Drupal vulnerability is being used to deploy cryptojacking malware
Attackers are exploiting a three-month-old critical vulnerability in Drupal to compromise systems and secretly turn them into malicious …
GDPR: An Opportunity for Better Threat Intelligence Sharing
General Data Protection Regulation (GDPR) , Info Sharing , Privacy GDPR: An Opportunity for Better Threat Intelligence Sharing …
Preview: ISMG’s Fraud and Breach Summit in Chicago
Leading the latest edition of the ISMG Security Report: A preview of next week’s Fraud and Breach Prevention Summit in Chicago, which will …
Why Security Skills Should Be Taught, Not Hired
Chief information security officers (CISOs) across the globe have long lamented the fact that so many job applicants lack the security …
Palo Alto Networks Commitment to Educating European CEOs and Boards on Cybersecurity as a Business Issue
In recent years, the topic of cybersecurity awareness, education, training, and skills has grown in importance across the European Union. …
Holy Potatoes! Popular games remove “spyware” after gamers revolt
Whether what Red Shell does is an invasion of privacy or a harmless tool seems to depend on whether you’re a developer or a concerned …
China Escalates Hacks Against the US as Trade Tensions Rise
United States and China agreed to a digital truce that banned hacking private companies to steal trade secrets. And though the agreement …
Arizona Man Sentenced 20 Months Prison for Lunching Heavy DDOS Attack on Government Websites
A Man belongs to an Arizona state Sentenced to Prison for launch Distributed Denial of Service Attacks (DDoS) on Emergency Communications …
How Deception Technology Gives You The Upper Hand In Cybersecurity
Decoys are designed to catch threat activity as the adversary looks to understand the network and how to find its target. Whether through a …
ICE staff doxxed on Twitter, GitHub, Medium amid child separation furore
The tension over the Trump administration’s family separation policy spread throughout social media this week, after Medium, GitHub and …
Amazon Employees Ask Bezos To Stop Selling Facial Recognition To Cops
Amazon employees have written a letter to CEO Jeff Bezos in which they ask the company to stop selling its facial recognition tool to …
ACLU Warns on Forced Malicious Software Updates
Installation of malicious software in legitimate products could compromise security, and damage trust in software updates altogether. …
CSO Spotlight: Eddie Garcia, Cloudera
Eddie Garcia is the chief information security officer (CISO) at Cloudera. Previously he was vice president of infosec and engineering at …
Office 365 users targeted by phishers employing simple HTML tricks
Phishers are using a simple but effective trick to fool Microsoft’s NLP-based anti-phishing protections and Office 365 users into …
Schneier warns of ‘perfect storm’: Tech is becoming autonomous, and security is garbage
Israel Cyber Week With insecure computers in charge, the healthcare and transportation sectors have become a nexus of security problems, …
Create Versatile Microservices in Golang — Part 4 (Authentication With JWT)
In the previous part in this series, we looked at creating a user service and started storing some users. Now we need to look at making our …
Cisco Released Patches for More than 30 Vulnerabilities Including the 5 Critical One’s in FXOS and NX-OS
Cisco released patches for 34 vulnerabilities affecting multiple products that include 5 critical vulnerabilities, 20 High severity …
TP-Link TL-WA850RE Remote Command Execution
#!/usr/bin/env python # Exploit Title: TP-Link Technologies TL-WA850RE Wi-Fi Range Extender – Command Execution # …
New infosec products of the week : June 22, 2018
ExtraHop Reveal(x) sheds light on the darkspace ExtraHop announced Reveal(x) Summer 2018. The latest release includes new capabilities …
Don’t panic, but your baby monitor can be hacked into a spycam
Security researchers say they can back up a mother’s claim that her baby monitor had been remotely hacked and used to spy on her family. …
Why cybercriminals are turning to cryptojacking for easy money
The cryptocurrency market has seen an incredible amount of attention and hype over the last year, culminating with Bitcoin values soaring …
Banking Trojans and cryptojacking on the rise
A new report analyzes threat data collected from approximately 750,000 Morphisec protected endpoints globally, between January 1 and March …
Red Alert 2.0 Android Trojan available for rent in the underground at $500 per Month
According to researchers at Trustwave, the source code of the Red Alert 2.0 Android Trojan is now available for rent on cybercrime …
Unrestricted access to systems and files exposes organizations to cybercrime
UK organisations are leaving themselves vulnerable to cybercrime with over a third of 18-24-year-olds able to access any files on their …
DZone Research: Keys to Security
To gather insights on the current and future state of security, we talked to 47 executives from 43 companies about security in their own …