Recently, much of the cybersecurity commentary and blogs have talked about new approaches for protecting the network, especially beyond the perimeter. For the past few years, the industry has focused on conditional access (i.e., identity as the new per…
Read More Have we put too much emphasis on protecting the network?Digital rights management (DRM) is a method to protect copyrights for digital media. In a world where technology allows us to share and copy various media and files, it is important to prevent or restrict unauthorized modification or distribution. This…
Read More How do I select a DRM solution for my business?Businesses and consumers are relying on the voice call more than ever during the pandemic with voice traffic up 184% in 2020 compared to 2019, according to a Hiya report. Phone scams However, this increase in voice calls is being exploited by scammers …
Read More Nearly 40% of consumers lost money to phone scams in 2020Cryptography is a vital part of cybersecurity. Security properties like confidentiality, integrity, authentication, non-repudiation rely on strong cryptographic mechanisms, especially in an always connected, always online world. Quantum computing and e…
Read More Quantum computing and encryption: Key to achieving resilience, technological sovereignty and leadershipBe careful with email auto-complete. This is an email feature that automatically completes a name for you when you begin typing it in the TO field. However, your email client can easily complete the wrong name for you. If you are emailing anything se…
Read More Email Auto-Complete25.9 million business account credentials and over 543 million breach assets tied to employees in the Fortune 1000 are readily available on the criminal underground, SpyCloud reveals. Password reuse risk “Year after year, studies show that the us…
Read More Rampant password reuse puts companies and customers at riskThe Canadian Centre for Cyber Security performs evaluations on common IT products and releases a report called “Common Criteria Certification.” This process allows for organizations to review an evaluation without needing to set up and configure an IT …
Read More Common Criteria Certification: What Is It, and What Does It Mean for Tripwire Enterprise?Social media is no stranger to scams. However, recent trends show scammers have started to show more aggression toward businesses since the beginning of the pandemic. Being able to recognize these scams can help you prevent injury to your business. Soc…
Read More Scams Starting on Social Media and Targeting Your BusinessAs the pandemic continues to challenge organizations worldwide, the role of chief financial officers (CFOs) has moved further beyond “economic guardians” of the enterprise to “architects of business value” and “catalysts of digital strategies,” with 72…
Read More CFOs are becoming catalysts of digital strategySpyCloud announced it has added a new password filter feature to SpyCloud Active Directory Guardian. With dozens or hundreds of online logins to manage, people often take shortcuts to keep track of their passwords. They use memorable words or names, ea…
Read More SpyCloud adds a password filter feature to Active Directory GuardianDenim Group announced its integration with NowSecure. This unique integration will enable customers to feed the results of their mobile application security testing from the NowSecure platform into ThreadFix—a platform powered by Denim Group to support…
Read More Denim Group and NowSecure create a clear path toward scalable vulnerability remediationBitglass announced additional technical integrations between its platform and SD-WAN providers. Specifically, organizations can now use Bitglass to secure traffic coming from branch locations via Citrix, Arista Networks, Aviatrix, and Sophos. This come…
Read More Bitglass reveals additional technical integrations between its platform and SD-WAN providersGoogle Cloud and Sigfox announced that the leading global 0G network and IoT platform services provider, has partnered with Google Cloud, to scale its cloud infrastructure and extend its IoT services portfolio. This partnership will enable Sigfox to ra…
Read More Google Cloud partners with Sigfox to scale its cloud infrastructure and extend its IoT services portfolioIvanti announced the appointment of Erik Randles, the company’s new senior vice president of global channels and alliances. In his new role, Randles will focus on growing Ivanti’s relationships and business with partners, developing a global integrated…
Read More Ivanti appoints Erik Randles as SVP of global channels and alliancesSANS Open-Source Intelligence blog pertaining to tools and resources shared at OSINT Summit
Read More List of Resource Links from Open-Source Intelligence Summit 2021In this blog post, Kevin will summarize the Weak Security Program, Unprotected Systems, and Poor Detection & Response webcast. | SANS Institute | Kevin Garvey
Read More Rekt Casino Revisited: Transformational Series Part 2This blog discusses the Solarwinds breach and its impact on industrial control systems (ICS).
Read More Shining some light on Solarwinds and ICSSurePoint Technologies announced the promotion of Steve Crossman to Chief Revenue Officer. SurePoint’s award-winning software addresses all areas of law firm operations including practice management, financial management, time management, workflow effi…
Read More SurePoint Technologies names Steve Crossman as Chief Revenue OfficerThe administrators of the most popular carding marketplace on the dark web Joker’s Stash announced his retirement. Cybercriminal behind the most prominent carding marketplace on the dark web Joker’s Stash retires, he will shut down its servers and destroy the backups. According to Forbes, the man has amassed a billion dollars worth of Bitcoin with […]
The post The kingpin behind Joker’s Stash retires with a billionaire exit appeared first on Security Affairs.
Read More The kingpin behind Joker’s Stash retires with a billionaire exitChromium-based browsers such as Microsoft Edge and Google Chrome will soon support the Intel CET security feature to prevent a wide range of vulnerabilities. […]
Read More Google Chrome, Microsoft Edge getting this Intel security featureOne of Canada’s biggest car and truck rental agencies is trying to recover after being hit by a ransomware attack, while a B.C. real estate company says a January attack led to ransomware
The post Canadian vehicle rental service hit by ransomware first…
A joint operation between French and Ukrainian law enforcement has reportedly led to the arrests of several members of the Egregor ransomware operation in Ukraine. […]
Read More Egregor ransomware affiliates arrested by Ukrainian, French policeA joint operation between French and Ukrainian law enforcement has reportedly led to the arrests of several members of the Egregor ransomware operation in Ukraine. […]
Read More Egregor ransomware members arrested by Ukrainian, French policeThis week a report has revealed details on the two spyware strains leveraged by state-sponsored threat actors during the India-Pakistan conflict.
The malware strains named Hornbill and SunBird have been delivered as fake Android apps (APKs) by the Co…
Today’s podcast features a discussion with Terry Cutler of Cyology Labs about the cyber attack on a Florida city’s water treatment plant and how utilities can be protected
The post Cyber Security Today – Week in Review for Friday February 12, 2021 firs…
PayPal has addressed a reflected cross-site scripting (XSS) vulnerability that affected the currency converter feature of user wallets. PayPal has fixed a reflected cross-site scripting (XSS) vulnerability that was discovered in the currency converter feature of user wallets on February 19, 2020, close one year ago. The ‘reflected XSS and CSP bypass’ vulnerability was reported […]
The post PayPal addresses reflected XSS bug in user wallet currency converter appeared first on Security Affairs.
Read More PayPal addresses reflected XSS bug in user wallet currency converterA new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the international press subscribe here. COMB breach: 3.2B email and password pairs leaked online Hacking Nespresso machines to have unlimited funds to purchase […]
The post Security Affairs newsletter Round 301 appeared first on Security Affairs.
Read More Security Affairs newsletter Round 301The FBI is warning companies about the use of out-of-date Windows 7 systems, desktop sharing software TeamViewer, and weak account passwords. The FBI issues this week a Private Industry Notification (PIN) alert to warn companies about the risks of using out-of-date Windows 7 systems, poor account passwords, and desktop sharing software TeamViewer. The alert comes […]
The post FBI’s alert warns about using Windows 7 and TeamViewer appeared first on Security Affairs.
Read More FBI’s alert warns about using Windows 7 and TeamViewerHere’s an overview of some of last week’s most interesting news and articles: Vulnerabilities in widely used TCP/IP stacks open IoT, OT devices to attack Forescout researchers have discovered nine vulnerabilities affecting nine different TC…
Read More Week in review: Improving vulnerability triage, RDP attacks soaring, hackers in high demand