Cybersecurity News
How to Attract More Computer Science Grads to the Cybersecurity Field
With 465,000 cybersecurity job openings in the United States, why is recruiting so difficult? A recent college graduate offers his take.
16 July 2021
Artwork Archive cloud storage misconfiguration exposed user data, revenue records
An unsecured bucket exposed PII and sales information.16 July 2021
Microsoft: New Unpatched Bug in Windows Print Spooler
Another vulnerability separate from PrintNightmare allows for local elevation of privilege and system takeover.
16 July 2021
Toddler mobile banking malware surges across Europe
The Android malware is a new and persistent threat to European citizens and banks alike.16 July 2021
Chinese APT LuminousMoth abuses Zoom brand to target gov't agencies
Fake Zoom apps are being spread to conduct cyber surveillance.16 July 2021
Vacationing? How to avoid the cybersecurity blues
From securing your devices to avoiding public Wi-Fi hotspots for logging into apps we look at measures you can take to remain safe while this holiday season.
The post Vacationing? How to avoid the cybersecurity blues appeared first on WeLiveSecurity
16 July 2021
Microsoft points the finger at Israeli spyware seller for DevilsTongue attacks
Updates released this week protect against two key zero-day vulnerabilities weaponized by customers.16 July 2021
Attackers Exploited 4 Zero-Day Flaws in Chrome, Safari & IE
At least two government-backed actors -- including one Russian group -- used the now-patched flaws in separate campaigns, Google says.15 July 2021
State Dept. to Pay Up to $10M for Information on Foreign Cyberattacks
The Rewards for Justice program, a counterterrorism tool, is now aimed at collecting information on nation-states that use hackers to disrupt critical infrastructure.15 July 2021
Zero-Day Attacks on Critical WooCommerce Bug Threaten Databases
The popular e-commerce platform for WordPress has started deploying emergency patches.
15 July 2021
CISA Launches New Website to Aid Ransomware Defenders
StopRansomware.gov provides information to help organizations protect against, and respond to, ransomware attacks.15 July 2021
Microsoft: Israeli Firm's Tools Used to Target Activists, Dissidents
Candiru sold spyware that exploited Windows vulnerabilities and had been used in attacks against dissidents, activists, and journalists.15 July 2021
IoT-Specific Malware Infections Jumped 700% Amid Pandemic
Gafgyt and Mirai malware represented majority of IoT malware, new data from Zscaler shows.15 July 2021
How to Bridge On-Premises and Cloud Identity
Identity fabric, a cloud-native framework, removes the need for multiple, siloed, proprietary identity systems.15 July 2021
Fake Zoom App Dropped by New APT ‘LuminousMoth’
First comes spear-phishing, next download of malicious DLLs that spread to removable USBs, dropping Cobalt Strike Beacon, and then, sometimes, a fake Zoom app.
15 July 2021
SonicWall Warns Secure VPN Hardware Bugs Under Attack
SonicWall issued an urgent security alert warning customers that some of its current and legacy secure VPN appliances were under active attack.
15 July 2021
SonicWall Warns Firewall Hardware Bugs Under Attack
SonicWall issued an urgent security alert warning customers that some of its current and legacy firewall appliances were under active attack.
15 July 2021
What to Look for in an Effective Threat Hunter
The most important personality traits, skills, and certifications to look for when hiring a threat hunting team.15 July 2021
Data officers raid two properties over Matt Hancock CCTV footage leak
Computer equipment and electronic devices seized in connection with images of minister kissing aide
Two residential properties in the south of England have been raided by data protection officers, as part of their investigation into who leaked CCTV footage of Matt Hancock kissing an aide in his office.
The Information Commissioner’s Office (ICO) said they had seized computer equipment and electronic devices as part of the operation on Thursday morning, amid an ongoing investigation into alleged breaches of the Data Protection Act.
Continue reading...15 July 2021
Safari Zero-Day Used in Malicious LinkedIn Campaign
Researchers shed light on how attackers exploited Apple web browser vulnerabilities to target government officials in Western Europe.
15 July 2021