Cybersecurity News
UC San Diego Health Breach Tied to Phishing Attack
![UC San Diego Health Breach Tied to Phishing Attack UC San Diego Health Breach Tied to Phishing Attack](https://media.threatpost.com/wp-content/uploads/sites/103/2018/04/03111404/Security-Breach-Investigation-150x150.jpg)
CISA’s Top 30 Bugs: One’s Old Enough to Buy Beer
![CISA’s Top 30 Bugs: One’s Old Enough to Buy Beer CISA’s Top 30 Bugs: One’s Old Enough to Buy Beer](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/29132959/top-vulnerabilities-150x150.jpeg)
Leading cybersecurity agencies reveal list of most exploited vulnerabilities of the past 2 years
There are 30 vulnerabilities listed in total; organizations would do well to patch their systems if they haven’t done so yet
The post Leading cybersecurity agencies reveal list of most exploited vulnerabilities of the past 2 years appeared first on WeLiveSecurity
Israeli Government Agencies Visit NSO Group Offices
![Israeli Government Agencies Visit NSO Group Offices Israeli Government Agencies Visit NSO Group Offices](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/29122331/NSO-Group-150x150.jpg)
The Life Cycle of a Breached Database
Every time there is another data breach, we are asked to change our password at the breached entity. But the reality is that in most cases by the time the victim organization discloses an incident publicly the information has already been harvested many times over by profit-seeking cybercriminals. Here's a closer look at what typically transpires in the weeks or months before an organization notifies its users about a breached database. Our continued reliance on passwords for authentication has contributed to one toxic data spill or hack after another. One might even say passwords are the fossil fuels powering most IT modernization: They're ubiquitous because they are cheap and easy to use, but that means they also come with significant trade-offs -- such as polluting the Internet with weaponized data when they're leaked or stolen en masse.Six Malicious Linux Shell Scripts Used to Evade Defenses and How to Stop Them
![Six Malicious Linux Shell Scripts Used to Evade Defenses and How to Stop Them Six Malicious Linux Shell Scripts Used to Evade Defenses and How to Stop Them](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/26105054/Six-Malicious-Linux-Shell-Scripts-Used-to-Evade-Defenses-and-How-to-Stop-Them--150x150.jpg)
Tackling the insider threat to the new hybrid workplace
Now that organizations are set to evolve a hybrid blend of home and office-based work for most employees, it is more important then ever to address the risks that insider threat can - willingly or unwitingly - pose.
The post Tackling the insider threat to the new hybrid workplace appeared first on WeLiveSecurity
Most Twitter users haven’t enabled 2FA yet, report reveals
Twitter’s transparency report revealed that users aren’t quick to adopt 2FA and once they do enable it, they choose the least secure option
The post Most Twitter users haven’t enabled 2FA yet, report reveals appeared first on WeLiveSecurity
8 Security Tools to be Unveiled at Black Hat USA
![8 Security Tools to be Unveiled at Black Hat USA 8 Security Tools to be Unveiled at Black Hat USA](https://img.deusm.com/darkreading/BlackHatTools2021.jpeg)
BlackMatter & Haron: Evil Ransomware Newborns or Rebirths
![BlackMatter & Haron: Evil Ransomware Newborns or Rebirths BlackMatter & Haron: Evil Ransomware Newborns or Rebirths](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/28141611/evil-baby-150x150.jpeg)
Reboot of PunkSpider Tool at DEF CON Stirs Debate
![Reboot of PunkSpider Tool at DEF CON Stirs Debate Reboot of PunkSpider Tool at DEF CON Stirs Debate](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/28134101/PunkSpider-150x150.png)
Booking your next holiday? Watch out for these Airbnb scams
With vacations in full swing, cybercriminals will be looking to scam vacationers looking for that perfect accommodation.
The post Booking your next holiday? Watch out for these Airbnb scams appeared first on WeLiveSecurity
Podcast: Why Securing Active Directory Is a Nightmare
![Podcast: Why Securing Active Directory Is a Nightmare Podcast: Why Securing Active Directory Is a Nightmare](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/27211434/nightmare-150x150.jpeg)
Enterprise data breach cost reached record high during COVID-19 pandemic
IBM research estimates that the average data breach now costs upward of $4 million.No More Ransom Saves Victims Nearly €1 Over 5 Years
![No More Ransom Saves Victims Nearly €1 Over 5 Years No More Ransom Saves Victims Nearly €1 Over 5 Years](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/27164121/No-more-ransom-150x150.jpeg)
Apple releases patch for zero‑day flaw in iOS, iPadOS and macOS
The vulnerability is under active exploitation by unknown attackers and affects a wide range of Apple’s products.
The post Apple releases patch for zero‑day flaw in iOS, iPadOS and macOS appeared first on WeLiveSecurity
Zimbra Server Bugs Could Lead to Email Plundering
![Zimbra Server Bugs Could Lead to Email Plundering Zimbra Server Bugs Could Lead to Email Plundering](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/27131958/malicious-email-150x150.jpeg)
Back-to-Basics: Use Strong Passwords
As small and medium businesses begin to re-open following the pandemic, it’s important to do so securely in order to protect customer’s payment card data. Too often, data breaches happen as a result of vulnerabilities that are entirely preventable. The PCI Security Standards Council (PCI SSC) has developed a set of payment protection resources for small businesses. In this 8-part back-to-basics series, we highlight payment security basics for protecting against payment data theft. Today’s blog focuses on using strong passwords.
Three Zero-Day Bugs Plague Kaseya Unitrends Backup Servers
![Three Zero-Day Bugs Plague Kaseya Unitrends Backup Servers Three Zero-Day Bugs Plague Kaseya Unitrends Backup Servers](https://media.threatpost.com/wp-content/uploads/sites/103/2021/07/27112232/zero-day-150x150.jpeg)
Apple Patches Actively Exploited Zero-Day in iOS, MacOS
![Apple Patches Actively Exploited Zero-Day in iOS, MacOS Apple Patches Actively Exploited Zero-Day in iOS, MacOS](https://media.threatpost.com/wp-content/uploads/sites/103/2020/10/06094956/apple-mac-security-150x150.jpg)