security.didici.cc
Worried your data protection strategy is dated? Don’t let a ransomware infection prove you right
52 minutes agoTrust us – you need to tune into this Webcast Some say the best form of defense is offense. But when it comes to modern ransomware from cyber-crime orgs that are well-funded, possibly have state actor backing, and have your data under their control, j ...
The Graph Foundation launches bug bounty program
2 hours agoBugs in scope include RCE and those leading to the loss of user funds.
SolarWinds urges US judge to toss out crap infosec sueball: We got pwned by actual Russia, give us a break
3 hours agoCompany says it didn't skimp on security before everything went wrong SolarWinds is urging a US federal judge to throw out a lawsuit brought against it by aggrieved shareholders who say they were misled about its security posture in advance of the infamou ...
Phishing Campaign Dangles SharePoint File-Shares
4 hours agoAttackers spoof sender addresses to appear legitimate in a crafty campaign that can slip past numerous detections, Microsoft researchers have discovered.
Security researchers warn of TCP/IP stack flaws in operational technology devices
4 hours agoResearchers at Forescout disclose INFRA:HALT, a set of 14 security vulnerabilities in TCP/IP stacks commonly used in industrial infrastructure - and organisations are urged to apply the updates.
Four US Agencies Earned A D In Cybersecurity
5 hours ago
SEC Chair Wants To Regulate Cryptocurrency
5 hours ago
Google: Linux kernel and its toolchains are underinvested by at least 100 engineers
6 hours agoSecurity not good enough, claims Chocolate Factory engineer Google's open security team has claimed the Linux kernel code is not good enough, with nearly 100 new fixes every week, and that at least 100 more engineers are needed to work on it.…
Qualys partners with Red Hat to improve Linux and Kubernetes security
7 hours agoSecurity company Qualys is partnering with Red Hat to bring built-in Cloud Agent security to Red Hat Enterprise Linux CoreOS and Red Hat OpenShift.
Google's One Tap lets you sign into websites and apps without a password
7 hours agoGoogle One Tap makes sign-ups and sign-in easier but it's not available on Safari or any other mobile browser for iOS.
Hacker target Kubernetes to steal data and processing power. Now the NSA has tips to protect yourself
8 hours agoTop causes of compromises include supply chain risks, malicious attacks, and insider threats.
UK data watchdog sees its approach to government health tech during COVID-19 outbreak as 'pragmatic'
10 hours agoPandemic also behind fall in breaches, according to ICO annual reaport The UK's data watchdog has defended its approach to regulating government health technologies during the pandemic as "pragmatic."…
Legacy EDR. Yes, it’s a thing
12 hours agoDon’t let your endpoints become a sitting target, says Fortinet Sponsored Thirty years ago, the industry birthed networked antivirus (NAV), which later morphed into endpoint protection (EP), managed using endpoint protection platforms (EPPs). More rec ...
We COVID-Clicked on Garbage, Report Finds: Podcast
14 hours agoWere we work-from-home clicking zombies? Steganography attacks snagged three out of eight recipients. Nasty CAPTCHAs suckered 50 times more clicks during 2020.
Kaseya ransomware attack sets off race to hack service providers
16 hours ago"This is going to happen again and again."
Facebook brings Snapchat-like view once photo and video feature to WhatsApp
18 hours agoWhatsApp's view once mode is being touted by the social media giant as a move to give users more privacy.
PwC Australia is on a cyber security hiring spree
22 hours agoNabs TransGrid's CISO in latest intake.
Iranian APT Lures Defense Contractor in Catfishing-Malware Scam
22 hours agoFake aerobics-instructor profile delivers malware in a supply-chain attack attempt from TA456.
Russia tells UN it wants vast expansion of cybercrime offenses, plus network backdoors, online censorship
22 hours agoAnd said entirely with a straight face, too Russia has put forward a draft convention to the United Nations ostensibly to fight cyber-crime.…
Akamai reports Q2 revenue, EPS above expectations, shares slip
22 hours agoAkamai said it’s security revenue in the quarter rose by 25%, year over year, to $325 million.
Ransomware Volumes Hit Record Highs as 2021 Wears On
22 hours agoThe second quarter of the year saw the highest volumes of ransomware attacks ever, with Ryuk leading the way.
It's time to improve Linux's security
23 hours agoTop Linux developer Kees Cook calls for everyone to push more for securing Linux.
Do you have a grip on the lifecycle security of your AWS-deployed applications?
1 day agoLearn how to manage the risks of cloud native environments with Aqua and AWS Promo There’s no doubt that adopting DevOps methodologies and CI/CD pipelines, and extending cloud native technologies like containerization can massively accelerate your app ...
Raccoon Stealer Bundles Malware, Propagates Via Google SEO
1 day agoAn update to the stealer-as-a-service platform hides in pirated software, pilfers crypto-coins and installs a software dropper for downloads of more malware.
‘DeadRinger’ Targeted Exchange Servers Long Before Discovery
1 day agoCyberespionage campaigns linked to China attacked telecoms via ProxyLogon bugs, stealing call records and maintaining persistence, as far back as 2017.
Bugs in Chrome's JavaScript engine can lead to powerful exploits. This project aims to stop them
1 day agoAdditional protections for one key part of Chrome could stop attacks faster.
UK's Ministry of Defence coughs up bug bounties for public-facing web pentesting
1 day agoSmall steps could lead to bigger strides The Ministry of Defence has paid out the first bug bounties to ethical computer hackers who probed its websites for vulnerabilities, according to a cheery missive from HackerOne.…
Google Cloud Security joins Exabeam-led cybersecurity alliance
1 day agoThe cybersecurity companies will help SecOps teams integrate new applications and technologies while ensuring interoperability across the XDR security vendor solutions set.
Raccoon stealer-as-a-service will now try to grab your cryptocurrency
1 day agoThe malware has been upgraded to target even more financial information.
Get a lifetime VPN subscription and 10TB of cloud backup for under $65
1 day agoNow you can protect everything on your computer and get the utmost in online protection, permanently.
Paragon: Yet Another Cyberweapons Arms Manufacturer
1 day agoForbes has the story: Paragon’s product will also likely get spyware critics and surveillance experts alike rubbernecking: It claims to give police the power to remotely break into encrypted instant messaging communications, whether that’s WhatsApp, S ...
Supply chain attacks are getting worse, and you are not ready for them
1 day agoEU cybersecurity think tank looks at 24 recent supply chain attacks, and warns that defences against them are not good enough.
Shopping for execs: ID management biz Okta poaches Google's veep of engineering to run product dev activities
1 day agoHead techie for Chocolate Factory's search ad biz departs Mountain View Identity-as-a-service slinger Okta has poached Google veep of engineering Sagnik Nandy to become its president and chief tech officer.…
Research finds attack groups working for 'Chinese state interests' lurking in SE Asian telco networks since 2017
1 day agoHandy way to keep tabs on 'activists, politicians, business leaders, and more' Attack protection specialist Cybereason has fingered threat actors working on behalf of "Chinese state interests" as being behind attacks on telcos operating in Southeast Asia ...
DeadRinger: Chinese APTs strike major telecommunications companies
1 day agoPreviously unknown campaigns center around "Chinese state interests."
Auditor finds WA Police accessed SafeWA data 3 times and the app was flawed at launch
1 day agoWA Health released SafeWA check-in information for purposes other than COVID-19 contact tracing, with six requests being made by the police despite government messaging that the information would only be used to support contact tracing.
Constant review of third-party security critical as ransomware threat climbs
1 day agoLulled into complacency, businesses face risks of supply chain attacks even after they have done their due diligence in assessing their third-party suppliers' security posture before establishing a partnership.
Regulations against ransomware payment not ideal solution
1 day agoWith ransomware attacks increasing, legislations have been mooted as a way to bar companies from paying up and further fuelling such activities, but such policies can be difficult to enforce and may result in more dire consequences.
COVID-19 vaccine portal for Italy's Lazio region hit with cyberattack
1 day agoGovernment officials took to Facebook to say no data was stolen and to notify residents of the daily COVID-19 figures.
‘PwnedPiper’: Devastating Bugs in >80% of Hospital Pneumatics
1 day agoPodcast: Blood samples aren’t martinis. You can’t shake them. But bugs in pneumatic control systems could lead to that, RCE or ransomware.
No title
1 day agoVulnerability Name Affected Component CVE# Date Underflow in udpRXThread HMI3 Control Panel in: Nexus Panel CVE-2021-37161 02/08/2021 Overflow in sccProcessMsg HMI3 Control Panel in: Nexus Panel CVE-2021-37162 02/08/2021 Overflow in hmiProcessMsg HMI3 Con ...
Chipotle Emails Serve Up Phishing Lures
1 day agoMass email distribution service compromise mirrors earlier Nobelium attacks.
Credit-card-stealing, backdoored packages found in Python's PyPI library hub
1 day agoPlus: SolarWinds cyber-spies hit US prosecutors' email systems, and more In brief Malicious libraries capable of lifting credit card numbers and opening backdoors on infected machines have been found in PyPI, the official third-party software repository ...
New Normal Demands New Security Leadership Structure
2 days agoAt the inaugural Omdia Analyst Summit, experts discuss where the past year has created gaps in traditional security strategy and how organizations can fill them.
Nuisance call-blocking firm fined £170,000 for making almost 200,000 nuisance calls
2 days agoIrony, thy name is Yes Consumer Solutions Ltd A firm that sells nuisance call-blocking systems is itself nursing a £170,000 fine from the UK's data watchdog, ironically for cold calling almost 200,000 people registered with the Telephone Preference Servi ...
CDW acquires cybersecurity company Focal Point Data Risk
2 days agoTerms of the deal were not disclosed.
Windows 11 is the COVID-19 vaccine for your PC
2 days agoVast segments of the PC population are unprotected. Upgrade your hardware and get the shot.
Multiple Zero-Day Flaws Discovered in Popular Hospital Pneumatic Tube System
2 days ago"PwnedPiper" flaws could allow attackers to disrupt delivery of lab samples or steal hospital employee credentials, new research shows.
Stop ignoring this iPhone warning
2 days agoApple makes it seem like all updates are the same. They are not.
The cybersecurity jobs crisis is getting worse, and companies are making basic mistakes with hiring
2 days agoOverworked cybersecurity employees are struggling to keep up with the challenges of the job, and employers are struggling to keep hold of them.
Microsoft: Watch out for this 'sneakier than usual' phishing attack
2 days agoMicrosoft issues an alert over a 'crafty' phishing campaign.
A Cold War is raging in cyberspace. Here's how countries are preparing their defenses
2 days agoMuch like conventional militaries, countries also need to perform occasional drills of their cybersecurity defenses. Instead of soldiers and tanks, these involve virtual machines – and months of pestering executives for their login credentials.
The European Space Agency Launches Hackable Satellite
2 days agoOf course this is hackable: A sophisticated telecommunications satellite that can be completely repurposed while in space has launched. […] Because the satellite can be reprogrammed in orbit, it can respond to changing demands during its lifetime. [… ...
PwnedPiper vulns have potential to turn Swisslog's PTS hospital products into Swiss cheese, says Armis
2 days agoHardcoded passwords, unencrypted connections and unauthenticated firmware updates... patches released Security specialist Armis has discovered vulnerabilities, collectively dubbed PwnedPiper, in pneumatic tube control systems used in thousands of hospital ...
IoT: Security researchers warn of vulnerabilities in hospital pneumatic tube systems
2 days agoPwnedPiper vulnerabilities affect pneumatic tube system (PTS) stations used throughout thousands of hospitial networks - and attackers could use them to crash systems, deliver ransomware and steal data, warn security researchers, so patch now.
SolarWinds attackers breached email of US prosecutors, says Department of Justice
2 days agoHackers - probably backed by Russia - had access to emails for over six months.
Ransomware operators love them: Key trends in the Initial Access Broker space
2 days agoIn a threat actor's mind, take out the legwork, reap the proceeds of blackmail.
Stop ignore this iPhone warning
2 days agoApple makes it seem like all updates are the same. They are not.
Toll Group justifies ASD engagement times following ransomware attacks
2 days agoSays it was preoccupied with the incident response.
Huawei to America: You're not taking cyber-security seriously until you let China vouch for us
2 days agoSlams Biden's Executive Order on improving infosec, calls for multilateral trust framework Huawei has decided to school America on cyber-security, and its lesson is to co-operate with China so its vendors – including Huawei – can be trusted around the ...
Toll unsure if it lawyered up to avoid ASD assistance following ransomware attack
2 days agoLogistics company said it might have been the company that was flouting assistance from the ASD, even though ASD Director-General in March last year said her organisation had been working with Toll.
Zoom agrees to pay subscribers $25 to put its security SNAFUs behind it
2 days agoZoombombing class action offers US$85M in payments, meaning even free accounts get a few bucks US-based Zoom users may have a little cash coming their way after the video meeting outfit lodged a preliminary settlement in a class action related to some of ...
Zoom to pay $85m to set aside privacy violation and zoombombing allegations
2 days agoAlong with the financial relief, Zoom will make various privacy and security changes as part of its class action settlement.
University of South Australia creates CISO role
2 days agoLooks to strengthen its cyber security.
Sysadmins: Why not simply verify there's no backdoor in every program you install, and thus avoid any cyber-drama?
4 days agoJust 'validate third-party code before using it', says Euro body Half of publicly reported supply chain attacks were carried out by "well known APT groups", according to an analysis by EU infosec agency ENISA, which warned such digital assaults need to dr ...
Ransomware attempt volume sets record, reaches more than 300 million for first half of 2021: SonicWall
4 days agoThe US, UK, Germany, South Africa and Brazil topped the list of countries most impacted by ransomware attempts while states like Florida and New York struggled as well.
Friday Squid Blogging: Squid Skin Is Naturally Anti-microbial
4 days agoOften it feels like squid just evolved better than us mammals. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here.
NSA Warns Public Networks are Hacker Hotbeds
4 days agoAgency warns attackers targeting teleworkers to steal corporate data.
I Am Parting With My Crypto Library
5 days agoThe time has come for me to find a new home for my (paper) cryptography library. It’s about 150 linear feet of books, conference proceedings, journals, and monographs — mostly from the 1980s, 1990s, and 2000s. My preference is that it goes to an educa ...
Here's 30 servers Russian intelligence uses to fling malware at the West, beams RiskIQ
5 days agoBiden-Putin summit went well, then Details of 30 servers thought to be used by Russia's SVR spy agency (aka APT29) as part of its ongoing campaigns to steal Western intellectual property were made public today by RiskIQ.…
Novel Meteor Wiper Used in Attack that Crippled Iranian Train System
5 days agoA July 9th attack disrupted service and taunted Iran’s leadership with hacked screens directing customers to call the phone of Iranian Supreme Leader Khamenei with complaints.
ProtonVPN gets serious speed boost with VPN Accelerator
5 days agoWhen push comes to shove, what you really want from a Virtual Private Network, such as ProtonVPN, is 1) privacy and 2) speed. The new ProtonVPN delivers on both.
Microsoft: This unusual Windows and Linux malware does everything it can to stay on your network
5 days agoLemonDuck coin-mining malware has been crafted by some very determined, financially-motivated cybercriminals.
VPN deal: Save 30% on the highest-rated VPN services
5 days agoThe safety and security of your personal data is priceless, Fortunately, you can get an excellent deal right now on some of the best VPNs on the market.
Storing Encrypted Photos in Google’s Cloud
5 days agoNew paper: “Encrypted Cloud Photo Storage Using Google Photos“: Abstract: Cloud photo services are widely used for persistent, convenient, and often free photo storage, which is especially useful for mobile devices. As users store more and more photos ...
Microsoft warns: These attackers can go from first contact to launching ransomware in just 48 hours
5 days agoHuman operators make BazaCall malware harder than usual to detect malicious email. The group sometimes installs nasty Ryuk ransomware.
Malware and Trojans, but there's only one horse the boss man wants to hear about
5 days agoThe company's IT might be on fire, but my needs trump those of the many On Call A call from the executive floor is rarely a harbinger of happiness, especially when one is wading knee-deep through the molasses of malware. Welcome to one Register reader's ...
New Aussie legislation to target use of personal information by social media
5 days agoThe Attorney-General's Department said the legislation, separate from its review of the Privacy Act, will target social media companies to ensure greater transparency about how personal information is being used and how consent is obtained.
We can't believe people use browsers to manage their passwords, says maker of password management tools
5 days agoYou just save it in Chrome or Firefox? Ugh. And then it autofills when you need it again? Oh the horror It seems some of us are, in the year of our lord 2021, still reusing the same password for multiple sites, plugging personal gear into work networks, a ...
Google claims no instances of foreign interference campaigns targeting Australia
5 days agoWhile conceding that foreign interference campaigns on its platforms targeting other jurisdictions have made their way to Australia, Google said none pursued the country specifically.
Disinformation for hire: PR firms are the new battleground for Facebook
5 days agoFacebook's head of security policy has testified before an Australian Parliamentary inquiry that his company has witnessed an increasing use of marketing firms or PR agencies that are essentially hired to run disinformation campaigns.
NAB finds a new chief security officer
5 days agoFollowing Nicholas McKenzie's departure in April.
Hikvision records 40% net profit uplift for 1H21 despite of COVID-19 and political conflict
5 days agoOne of China's video surveillance manufacturer Hikvision believes its R&D investments will help boost the company's financial position.
NSW Education says cyber attack may have compromised contact data
5 days agoForensic analysis now underway to "fully assess risk".
Cisco researchers spotlight Solarmarker malware
5 days agoA new report said the Solarmarker campaign is being conducted by "fairly sophisticated" actors focusing their energy on credential and residual information theft.
Home Affairs asks for a rush on Critical Infrastructure Bill to allow ASD to act lawfully
5 days agoThe Critical Infrastructure Bill is urgently required, the Department of Home Affairs has argued, who noted the rules governing the individual designated sectors could be worked out later by the responsible minister.
Security team finds Crimea manifesto buried in VBA Rat using double attack vectors
5 days agoThe Malwarebytes report said a new threat actor may be targeting Russian and pro-Russian individuals.
Fortinet beats Wall Street expectations for Q2 thanks to sales in the Americas
5 days agoFortinet delivered second quarter revenue of $801.1 million, up 29.7% from a year ago.
NZ state broadcaster slammed for stories sourced from ransomware-raided info
5 days agoPrivacy watchdog says reporting raises quite significant ethical concerns.
UC San Diego Health Breach Tied to Phishing Attack
5 days agoEmployee email takeover exposed personal, medical data of students, employees and patients.
CISA’s Top 30 Bugs: One’s Old Enough to Buy Beer
6 days agoThere are patches or remediations for all of them, but they're still being picked apart. Why should attackers stop if the flaws remain unpatched, as so many do?
Israeli Government Agencies Visit NSO Group Offices
6 days agoAuthorities opened an investigation into the secretive Israeli security firm.
Spam is Chipotle's secret ingredient: Marketing email hijacked to dish up malware
6 days agoMore than 120 messages caught trying to filch credentials from customers of USAA Bank, Microsoft Between July 13 and July 16, someone took over the Mailgun account owned by restaurant chain Chipotle Mexican Grill and placed an order for login credentials ...
Upcoming Android privacy changes include ability to blank advertising ID, and 'safety section' in Play store
6 days agoNew policies give users more control, but ad tracking still on by default Google has shared details of upcoming changes to Android including the ability to blank a device's advertising ID, and a new safety section for apps in the Play store.…
Six Malicious Linux Shell Scripts Used to Evade Defenses and How to Stop Them
6 days agoUptycs Threat Research outline how malicious Linux shell scripts are used to cloak attacks and how defenders can detect and mitigate against them.
AirDropped Gun Photo Causes Terrorist Scare
6 days agoA teenager on an airplane sent a photo of a replica gun via AirDrop to everyone who had their settings configured to receive unsolicited photos from strangers. This caused a three-hour delay as the plane — still at the gate — was evacuated and searche ...
Ransomware: These are the two most common ways hackers get inside your network
6 days agoTwo attack methods are the most popular - and most successful - techniques ransomware gangs are using to lay the foundations for their cyber-extortion campaigns.
Dump Google Chrome and keep (almost) all the benefits
6 days agoBetter performance, longer battery life, and none of the Google stuff.
Hackers used never-before-seen wiper in recent attack on Iranian train system: report
6 days agoSentinelOne analysts were able to recreate the July 9 attack and identify the threat actor behind it.
Mozilla adds new features to its VPN service, raises prices for some users
6 days agoMozilla's VPN gains split tunneling and says customers demanded more flexible pricing options.
McAfee: Babuk ransomware decryptor causes encryption 'beyond repair'
6 days agoBabuk announced earlier this year that it would be targeting Linux/UNIX and ESXi or VMware systems with ransomware.
Microsoft: Zero Trust security just hit the mainstream
6 days agoIf you work in cybersecurity and you don't know about Zero Trust, you're among a very small minority, according to a Microsoft survey.
Israeli authorities investigate NSO Group over Pegasus spyware abuse claims
6 days agoReason for probe unknown, but CEO claims it will vindicate company's claims Israel's Ministry of Defense says the nation's government has visited spyware-for-governments developer NSO Group to investigate allegations its wares have been widely – and per ...
Here's a list of the flaws Russia, China, Iran and pals exploit most often, say Five Eyes infosec agencies
6 days agoAnd you've patched them all, haven't you, diligent readers? Western cybersecurity agencies have published a list of 30 of the most exploited vulnerabilities abused by hostile foreign states in 2020, urging infosec bods to ensure their networks and deploym ...
'Woefully insufficient': Biden administration's assessment of critical infrastructure protection
6 days agoMemorandum details plans to turn that around with rapid development of security baselines, not mandates The Biden administration has issued a National Security Memorandum on Improving Cybersecurity for Critical Infrastructure Control Systems to address wh ...
Over 100 Taiwanese political figures' messages leaked outta LINE app
6 days agoAttack turned off encryption function, which made snooping rather easier Law enforcement agencies in Taiwan are investigating a cyberattack on over 100 local political figures and dignitaries who used the messaging app LINE.…
Telstra's Asia Pacific CISO Narelle Devine navigates security at Australia's largest telco
6 days agoProtecting people and systems.
Any Android security app is better than Google Play Protect
6 days agoIndependent testing slates Google's security app.
US senators urge barring Huawei, ZTE from US$1.9 trillion govt funding measure
6 days agoOver continued security concerns.
Israel tells France it is taking NSO spyware allegations seriously
6 days agoAs defence chiefs meet.
White House calls on America's most critical companies to improve cyber defences
6 days agoPotential regulation is on the horizon.
Hackers breach UC San Diego hospital, gaining access to SSNs and medical info of patients, employees, and students
6 days agoThe attackers gained access to personal data ranging from claims information to laboratory results, prescriptions, treatments, SSNs, payment card numbers or financial account information.
Cyber insurance rates fail to match catastrophe risk, says Chubb CEO
6 days agoAgainst backdrop of rising prices.
Security breaches where working from home is involved are costlier, claims IBM report
6 days agoGreat, it's not like employers need more reasons to haul you back to the office Firms looking to save money by shifting to more flexible ways of working will need to think carefully about IT security and the additional cost of breaches linked to staff wor ...
Biden orders CISA and NIST to develop cybersecurity performance goals for critical infrastructure
6 days agoThe order also formally establishes the Industrial Control System Cybersecurity Initiative which was created in April.
8 Security Tools to be Unveiled at Black Hat USA
6 days agoSecurity researchers and practitioners share a host of new cyber tools for penetration testing, reverse engineering, malware defense, and more.
BlackMatter & Haron: Evil Ransomware Newborns or Rebirths
1 week agoThey’re either new or old REvil & DarkSide wine in new bottles. Both have a taste for deep-pocketed targets and DarkSide-esque virtue-signaling.
Reboot of PunkSpider Tool at DEF CON Stirs Debate
1 week agoResearchers plan to introduce a revamp of PunkSpider, which helps identify flaws in websites so companies can make their back-end systems more secure, at DEF CON.
Average organization targeted by over 700 social engineering attacks each year: report
1 week agoAccording to a new Barracuda study, IT staffers receive an average of 40 targeted phishing attacks in a year.
Iranian state-backed hackers posed as flirty Scouser called Marcy to target workers in defence and aerospace
1 week agoRecognise this one? Oh dear... Iranian state-backed hackers posed as a flirty Liverpudlian aerobics instructor in order to trick defence and aerospace workers into revealing secrets, according to a newly-published study.…
One third of cybersecurity workers have faced harassment at work or online - this initiative aims to stamp it out
1 week agoRespect In Security is encouraging organisations to create a workplace free from abuse.
Get patching: US, UK, and Australia issue joint advisory on top 30 exploited vulnerabilities
1 week agoMajority of top vulnerabilities targeted last year were disclosed in the past two years, agencies from the United States, United Kingdom, and Australia have said, with Microsoft Office CVE dating from 2017.
De-anonymization Story
1 week agoThis is important: Monsignor Jeffrey Burrill was general secretary of the US Conference of Catholic Bishops (USCCB), effectively the highest-ranking priest in the US who is not a bishop, before records of Grindr usage obtained from data brokers was correl ...
Podcast: Why Securing Active Directory Is a Nightmare
1 week agoResearchers preview work to be presented at Black Hat on how AD “misconfiguration debt” lays out a dizzying array of attack paths, such as in PetitPotam.
Biden: Major cyber attack could lead to a 'real shooting war'
1 week agoJoe Biden sends a warning that 'a cyber breach of great consequence' could lead to a war with a major power.
These hackers posed as an aerobics instructor online to trick their targets into downloading malware
1 week agoCyber espionage campaign linked to the Iranian military drew victims in with fake social media profiles and messages in an attempt to steal usernames, passwords and other sensitive information.