BSidesKC 2022 – Joshua Brown’s ‘So, You Want To Be A CISO…?’Our sincere thanks to [BSidesKC 2022][1] for publishing their [outstanding conference videos][2] on the organization's...
Day: November 16, 2022
This was 3rd Quarter 2022 — A Cybersecurity Look Back
This was 3rd Quarter 2022 — A Cybersecurity Look BackIn the third quarter of 2022, the four universal cyberattack drivers were accounted for: war, religion, politics...
Stories from the Field: The Scare Factor Continues to Grow for Super Malicious Insiders
Stories from the Field: The Scare Factor Continues to Grow for Super Malicious InsidersOver the last few years, executive teams and board members have become increasingly...
Meta’s new kill chain model tackles online threats
Meta’s new kill chain model tackles online threatsIn April 2014, Lockheed Martin revolutionized the cyber defense business by publishing a seminal white paper Intelligence-Driven Computer Network...
New Updates for ESET’s Advanced Home Solutions
New Updates for ESET's Advanced Home SolutionsIt's no secret that antivirus software is as essential to your computer as a power cord. However, the threats don't...
Multiple High-Severity Flaws Affect Widely Used OpenLiteSpeed Web Server Software
Multiple High-Severity Flaws Affect Widely Used OpenLiteSpeed Web Server SoftwareMultiple high-severity flaws have been uncovered in the open source OpenLiteSpeed Web Server as well as its...
Russian-Canadian National Charged Over Involvement in LockBit Ransomware Attacks
Russian-Canadian National Charged Over Involvement in LockBit Ransomware AttacksThe U.S. Department of Justice (DoJ) has announced charges against a dual Russian and Canadian national for his...
VPN vs. DNS Security
VPN vs. DNS SecurityWhen you are trying to get another layer of cyber protection that would not require a lot of resources, you are most likely...
Malicious Google Play Store App Spotted Distributing Xenomorph Banking Trojan
Malicious Google Play Store App Spotted Distributing Xenomorph Banking TrojanGoogle has removed two new malicious dropper apps that have been detected on the Play Store for...
Experts Uncover Two Long-Running Android Spyware Campaigns Targeting Uyghurs
Experts Uncover Two Long-Running Android Spyware Campaigns Targeting UyghursTwo long-running surveillance campaigns have been found targeting the Uyghur community in China and elsewhere with Android spyware...
Global 2000 companies failing to adopt key domain security measures
Global 2000 companies failing to adopt key domain security measuresForbes Global 2000 companies are failing to adopt key domain security measures, exposing them to significant security...
Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in Images
Worok Hackers Abuse Dropbox API to Exfiltrate Data via Backdoor Hidden in ImagesA recently discovered cyber espionage group dubbed Worok has been found hiding malware in seemingly innocuous...
New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS Attacks
New KmsdBot Malware Hijacking Systems for Mining Crypto and Launch DDoS AttacksA newly discovered evasive malware leverages the Secure Shell (SSH) cryptographic protocol to gain entry...
What is an External Penetration Test?
What is an External Penetration Test?A penetration test (also known as a pentest) is a security assessment that simulates the activities of real-world attackers to identify...
Over 15,000 WordPress Sites Compromised in Malicious SEO Campaign
Over 15,000 WordPress Sites Compromised in Malicious SEO CampaignA new malicious campaign has compromised over 15,000 WordPress websites in an attempt to redirect visitors to bogus Q&A portals....
New “Earth Longzhi” APT Targets Ukraine and Asian Countries with Custom Cobalt Strike Loaders
New "Earth Longzhi" APT Targets Ukraine and Asian Countries with Custom Cobalt Strike LoadersEntities located in East and Southeast Asia as well as Ukraine have been...
Google to Pay $391 Million Privacy Fine for Secretly Tracking Users’ Location
Google to Pay $391 Million Privacy Fine for Secretly Tracking Users' LocationInternet giant Google has agreed to pay a record $391.5 million to settle with 40...
Researchers Say China State-backed Hackers Breached a Digital Certificate Authority
Researchers Say China State-backed Hackers Breached a Digital Certificate AuthorityA suspected Chinese state-sponsored actor breached a digital certificate authority as well as government and defense agencies...
Deep Packet Inspection vs. Metadata Analysis of Network Detection & Response (NDR) Solutions
Deep Packet Inspection vs. Metadata Analysis of Network Detection & Response (NDR) SolutionsToday, most Network Detection and Response (NDR) solutions rely on traffic mirroring and Deep...
PCspooF: New Vulnerability Affects Networking Tech Used by Spacecraft and Aircraft
PCspooF: New Vulnerability Affects Networking Tech Used by Spacecraft and AircraftCredit: Marina Minkin A novel attack method has been disclosed against a crucial piece of technology called...
Researchers Reported Critical SQLi and Access Flaws in Zendesk Analytics Service
Researchers Reported Critical SQLi and Access Flaws in Zendesk Analytics ServiceCybersecurity researchers have disclosed details of now-patched flaws in Zendesk Explore that could have been exploited...
Cohesity previews AI-powered ransomware protection suite, Datahawk
Cohesity previews AI-powered ransomware protection suite, DatahawkBackup and data management vendor Cohesity has started to preview a new ransomware protection SaaS product called Datahawk, which leverages...
Google to Roll Out Privacy Sandbox Beta on Android 13 by Early 2023
Google to Roll Out Privacy Sandbox Beta on Android 13 by Early 2023Internet behemoth Google on Tuesday said it plans to roll out Privacy Sandbox for...
Warning: New RapperBot Campaign Aims to Launch DDoS Attacks at Game Servers
Warning: New RapperBot Campaign Aims to Launch DDoS Attacks at Game ServersCybersecurity researchers have unearthed new samples of malware called RapperBot that are being used to...
The Slippery Slope of Cyber Insurance: What Every MS(S)P Needs to Know
The Slippery Slope of Cyber Insurance: What Every MS(S)P Needs to Know Reduce Your Risk, Protect Yourself and Your Clients, and Build New Revenue As an...
Critical RCE Flaw Reported in Spotify’s Backstage Software Catalog and Developer Platform
Critical RCE Flaw Reported in Spotify's Backstage Software Catalog and Developer PlatformSpotify's Backstage has been discovered as vulnerable to a severe security flaw that could be...
S3 Ep108: You hid THREE BILLION dollars in a popcorn tin?
S3 Ep108: You hid THREE BILLION dollars in a popcorn tin?Patches, busts, leaks and why even low-likelihood exploits can be high-severity risks - listen now!Leer másNaked...
Dangerous SIM-swap lockscreen bypass – update Android now!
Dangerous SIM-swap lockscreen bypass – update Android now!A bit like leaving the front door keys under the doormat...Leer másNaked SecurityA bit like leaving the front door...
China-Linked Cybercrime Group Attacks Asian Certificate Authority, Breaches Government Agencies
China-Linked Cybercrime Group Attacks Asian Certificate Authority, Breaches Government AgenciesChina-Linked Cybercrime Group Attacks Asian Certificate Authority, Breaches Government Agencies brooke.crothers Tue, 11/15/2022 - 15:14 8 views...
“Gucci Master” business email scammer Hushpuppi gets 11 years
“Gucci Master” business email scammer Hushpuppi gets 11 yearsLearn how to protect yourself from big-money tricksters like the Hushpuppis of the world...Leer másNaked SecurityLearn how to...