Cybersecurity News
Proofpoint sues Facebook to get permission to use lookalike domains for phishing tests
Facebook's crackdown on lookalike domains last year has touched some of the domains security firm Proofpoint was using for security awareness training exercises.10 February 2021
High-Severity Vulnerabilities Discovered in Multiple Embedded TCP/IP Stacks
Flaw leaves millions of IT, OT, and IoT devices vulnerable to attack.10 February 2021
Following Oldsmar attack, FBI warns about using TeamViewer and Windows 7
An FBI alert sent on Tuesday warns companies about the use of out-of-date Windows 7 systems, poor account passwords, and desktop sharing software TeamViewer.10 February 2021
What’s most interesting about the Florida water system hack? That we heard about it at all.
Stories about computer security tend to go viral when they bridge the vast divide between geeks and luddites, and this week's news about a hacker who tried to poison a Florida town's water supply was understandably front-page material. But for security nerds who've been warning about this sort of thing for ages, the most surprising aspect of the incident seems to be that we learned about it at all.10 February 2021
SASE Surge: Why the Market Is Poised to Grow
Analysts who anticipate the SASE market will expand by more than a factor of five before 2025 explain reasons behind the surge.10 February 2021
SAP Commerce Critical Security Bug Allows RCE
The critical SAP cybersecurity flaw could allow for the compromise of an application used by e-commerce businesses.
10 February 2021
Hacker Sets Alleged Auction for Witcher 3 Source Code
The ransomware gang behind the hack of CD Projekt Red may be asking for $1 million opening bids for the company's valuable data.
10 February 2021
Hybrid, Older Users Most-Targeted by Gmail Attackers
Researchers at Google and Stanford analyzed a 1.2 billion malicious emails to find out what makes users likely to get attacked. 2FA wasn't a big factor.
10 February 2021
Microsoft patches actively exploited Windows kernel flaw
This month’s relatively humble bundle of security updates fixes 56 vulnerabilities, including a zero-day bug and 11 flaws rated as critical
The post Microsoft patches actively exploited Windows kernel flaw appeared first on WeLiveSecurity
10 February 2021
Zero Trust in the Real World
Those who are committed to adopting the concept have the opportunity to make a larger business case for it across the organization, working with executive leaders to implement a zero-trust framework across the entire enterprise.10 February 2021
Intel Squashes High-Severity Graphics Driver Flaws
Intel is warning on security bugs across its graphics drivers, server boards, compute modules and modems.
10 February 2021
Paving the way: Inspiring Women in Payments - A podcast featuring Angel Grant
When she’s not perfecting her lock-picking skills, Angel Grant is busy building a diverse team who have the right attributes for the dynamic world of technology. In this edition of our podcast series, Angel explains that since your future job probably doesn’t exist yet, the keys to success are your transferrable skills.
10 February 2021
Multivector Attacks Demand Security Controls at the Messaging Level
As a Google-identified attack reveals, security teams need to look beyond VPNs and network infrastructure to the channels where social engineering takes place.10 February 2021
Authorities arrest SIM swapping gang that targeted celebrities
Eight men were arrested in England and Scotland as part of an investigation into a series of SIM swapping attacks targeting US celebrities.10 February 2021
The time for Insider Risk Management is now: Code42 2021 Data Exposure Report Reveals a Perfect Storm
The Code42 2021 Data Exposure Report highlights the need to adopt a new approach to data security and invest in modern Insider Risk technology.
10 February 2021
Supply-Chain Hack Breaches 35 Companies, Including PayPal, Microsoft, Apple
Ethical hacker Alex Birsan developed a way to inject malicious code into open-source developer tools to exploit dependencies in organizations internal applications.
10 February 2021
Investor data breach 'fatigue' reduces Wall Street punishment for cybersecurity failures
As data breaches are now common, acceptance now lessens the impact on share prices.10 February 2021
Adobe patches wave of critical bugs in Magento, Acrobat, Reader
Some of the vulnerabilities were reported through a hacking contest.10 February 2021
Microsoft warns enterprises of new 'dependency confusion' attack technique
New "dependency confusion" technique, also known as a "substitution attack," allows threat actors to sneak malicious code inside private code repositories by registering internal library names on public package indexes.10 February 2021
Microsoft Patch Tuesday, February 2021 Edition
Microsoft today rolled out updates to plug at least 56 security holes in its Windows operating systems and other software. One of the bugs is already being actively exploited, and six of them were publicized prior to today, potentially giving attackers a head start in figuring out how to exploit the flaws.09 February 2021