A recent wave of spear-phishing campaigns leveraged weaponized Windows 11 Alpha-themed Word documents with Visual Basic macros to drop malicious payloads, including a JavaScript implant, against...
DARKreading – CISA Launches JCDC, the Joint Cyber Defense Collaborative
“We can’t do this alone,” the new CISA director told attendees in a keynote at Black Hat USA today. BLACK HAT USA 2021 – Las Vegas – Jen Easterly, the...
welivesecurity – Twitter introduces new feature to automatically block abusive behavior
Dubbed Safety Mode, the feature will temporarily block authors of offensive tweets from being able to contact or follow users. Twitter has unveiled a new feature...
nakedsecurity – Big bad decryption bug in OpenSSL – but no cause for alarm
The well-known and widely-used encryption library OpenSSL released a security patch earlier this week. Annoyingly for those who like lean, modern, sans serif typefaces, the new version is OpenSSL...
nakedsecurity – Skimming the CREAM – recursive withdrawals loot $13M in cryptocash
You must have had that happy feeling (happiest of all when it’s still a day or two to payday and you know that your balance is...
blogs.cisco – What you see is what you get … to protect
In my first nearly 90 days since joining Cisco, I’ve spoken with customers from around the world. And one thing that I continue to hear? The shift to a more distributed workforce is...
C-Level Executives Should Stay Away From These 6 Cybersecurity Myths
The C-suite in any organisation is entrusted with the responsibility of spearheading innovation, progress, and company direction. Additionally, C-level executives hold a greater responsibility in maintaining...
BBC News – WhatsApp issued second-largest GDPR fine of €225m
WhatsApp has been fined €225m (£193m) by Ireland’s data watchdog for breaching privacy regulations. It is the largest fine ever from the Irish Data Protection Commission,...
thehackernews – Chinese Authorities Arrest Hackers Behind Mozi IoT Botnet Attacks
The operators of the Mozi IoT botnet have been taken into custody by Chinese law enforcement authorities, nearly two years after the malware emerged on the...
thehackernews – CISA Adds Single-Factor Authentication to the List of Bad Practices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added single-factor authentication to the short list of “exceptionally risky” cybersecurity practices that could expose critical infrastructure as...
Cisco Security Blog – Anatomy of a Breach: Preventing the Next Advanced Attack by Nirav Shah
Your company’s stock price nosedives by 15% in a single day. You get a flood of messages from concerned family and friends about your company. Your...
Cisco Security Blog – The Risk-Conscious, Security-Aware Culture: The Forgotten Critical Security Control
Chief Information Security Officers (CISOs) across the Global 2000 and Fortune 1000 are obsessed with protecting the workforce endpoints as critical vulnerabilities in the cybersecurity and...
The Hacker News – New SaaS Security Report Dives into the Concerns and Plans of CISOs in 2021
For years, security professionals have recognized the need to enhance SaaS security. However, the exponential adoption of Software-as-a-Service (SaaS) applications over 2020 turned slow-burning embers into...
The Hacker News – Interpol Arrests Moroccan Hacker Engaged in Nefarious Cyber Activities
Law enforcement authorities with the Interpol have apprehended a threat actor responsible for targeting thousands of unwitting victims over several years and staging malware attacks on...
threatpost – Lazarus Targets Job-Seeking Engineers with Malicious Documents
Notorious North Korean APT impersonates Airbus, General Motors and Rheinmetall to lure potential victims into downloading malware. The notorious Lazarus advanced persistent threat (APT) group has been identified...
threatpost – Baby Clothes Giant Carter’s Leaks 410K Customer Records
Purchase automation software delivered shortened URLs without protections. Baby clothes retailer Carter’s inadvertently exposed the personal data of hundreds of thousands of its customers, dating back...
threatpost – Volkswagen Vendor Exposed Data of 3.3m Drivers
Nearly all of the leaked data was for owners or wannabe owners of the automaker’s luxury brand of Audis, now at greater risk for phishing, ransomware...
The Hacker News – Instagram Bug Allowed Anyone to View Private Accounts Without Following Them (resolved now).
Author: Ravie Lakshmanan Instagram has patched a new flaw that allowed anyone to view archived posts and stories posted by private accounts without having to follow...
The Hacker News – Chinese Hackers Believed to be Behind Second Cyberattack on Air India
Even as a massive data breach affecting Air India came to light the previous month, India’s flag carrier airline appears to have suffered a separate cyber...
The Register – PrivacyMic looks to keep your home smart without Google, Alexa, Siri and pals listening in
Raspberry Pi-powered prototype proves 95% accurate, 100% private, claim boffins Researchers at the University of Michigan have proposed a way to have your privacy cake and...
The Register – Risk and reward: Nefilim ransomware gang mainly targets fewer, richer companies and that strategy is paying off, warns Trend Micro
Criminal operators emerged from woodwork just as COVID hit the West The Nefilim ransomware gang might not be the best known or most prolific online extortion...
The Register – China arrests over 1000 for using cryptocurrency to help launder proceeds of phone scams
As local search engines stop providing results on crypto-keywords China’s crackdown on cryptocurrencies has reached a new crescendo, with the nation’s Ministry of Public Security on...
The Register – EA Games looted by intruders: Publisher says ‘no player data accessed’ after reported theft of FIFA 21, Frostbite source
‘Surprise stealing mechanics’ made short work of network perimeter security Gareth CorfieldFri 11 Jun 2021 // 12:25 UTC EA Games, publisher of Battlefield, The Sims and FIFA, has admitted to a “recent incident of intrusion into...
The Hacker News – 7-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access
7-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access A seven-year-old privilege escalation vulnerability discovered in the polkit system service could be exploited by a...
The Hacker News – Hackers Can Exploit Samsung Pre-Installed Apps to Spy On Users
Hackers Can Exploit Samsung Pre-Installed Apps to Spy On Users Multiple critical security flaws have been disclosed in Samsung’s pre-installed Android apps, which, if successfully exploited,...
threatpost – ‘Fancy Lazarus’ Cyberattackers Ramp up Ransom DDoS Efforts
‘Fancy Lazarus’ Cyberattackers Ramp up Ransom DDoS Efforts The group, known for masquerading as various APT groups, is back with a spate of attacks on U.S....
threatpost – DarkSide Pwned Colonial With Old VPN Password
Attackers accessed a VPN account that was no longer in use to freeze the company’s network in a ransomware attack whose repercussions are still vibrating. It...
The Hacker News – New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites
Researchers have disclosed a new type of attack that exploits misconfigurations in transport layer security (TLS) servers to redirect HTTPS traffic from a victim’s web browser...
The Hacker News – Chinese Cyber Espionage Hackers Continue to Target Pulse Secure VPN Devices
Chinese Cyber Espionage Hackers Continue to Target Pulse Secure VPN Devices Ravie Lakshmanan Cybersecurity researchers from FireEye unmasked additional tactics, techniques, and procedures (TTPs) adopted by...
The Hacker News – Your Amazon Devices to Automatically Share Your Wi-Fi With Neighbors
Your Amazon Devices to Automatically Share Your Wi-Fi With Neighbors May 31, 2021Ravie Lakshmanan Starting June 8, Amazon will automatically enable a feature on its family...