Cybersecurity News
Nuclear Weapons Agency Hacked in Widening Cyberattack – Report
Sources said the DoE suffered "damage" in the attack, which also likely extends beyond the initially known SolarWinds Orion attack vector.
17 December 2020
'SocGholish' Attack Framework Powers Surge in Drive-By Attacks
Menlo Labs research team says framework's social engineering toolkit helps criminals impersonate software updates.17 December 2020
5M WordPress Sites Running ‘Contact Form 7’ Plugin Open to Attack
A critical unrestricted file upload bug in Contact Form 7 allows an unauthenticated visitor to take over a site running the plugin.
17 December 2020
XDR 101: What's the Big Deal About Extended Detection & Response?
Extended Detection and Response (XDR) could be the security management technology of your dreams...or not. What makes this technical 'evolution' so interesting to so many companies?
17 December 2020
XDR 101: What's the Big Deal About Extended Detection & Response?
Extended Detection and Response (XDR) could be the security management technology of your dreams...or not. What makes this technical 'evolution' so interesting to so many companies?
17 December 2020
Police Vouch for Hacker Who Guessed Trump’s Twitter Password
No charges for Dutch ethical hacker Victor Gevers who prosecutors say did actually access Trump’s Twitter account by guessing his password, “MAGA2020!” last October.
17 December 2020
Air-Gap Attack Turns Memory Modules into Wi-Fi Radios
Attack turns SDRAM buses into a Wi-Fi radio to leak data from air-gapped computers.
17 December 2020
RubyGems Packages Laced with Bitcoin-Stealing Malware
Two malicious software building blocks that could be baked into web applications prey on unsuspecting users.
17 December 2020
CISA: SolarWinds Not the Only Initial Attack Vector in Massive Breach
Agency says it has "evidence of additional initial access vectors" besides SolarWinds' Orion software.17 December 2020
Rising to the Challenge: Perspectives from Security Leaders on 2020 and Beyond
For those who work in the security industry 2020 has been a particularly challenging year. Chris Price talks to five industry leaders from different perspectives in the sector about how they coped with COVID and asks them to look forward to 2021.17 December 2020
51% of WFH Parents Say Children Have Accessed Work Accounts
In addition, 14% of surveyed parents who are working from home say their children have access to their work devices, new data shows.17 December 2020
Cryptologists Crack Zodiac Killer’s 340 Cipher
The Zodiac’s serial killer’s 340 cipher, which couldn’t be solved for 50 years, has been cracked by a remote team of mathematicians.
17 December 2020
3M Users Targeted by Malicious Facebook, Insta Browser Add-Ons
Researchers identify malware existing in popular add-ons for Facebook, Vimeo, Instagram and others that are commonly used in browsers from Google and Microsoft.
17 December 2020
Code42 Incydr Series: Bringing Shadow IT into the light with Code42 Incydr
The massive shift to remote work has turbocharged the shadow IT problem.
17 December 2020
Ad-blocker AdGuard deploys world's first DNS-over-QUIC resolver
DNS-over-QUIC, or DoQ, is viewed as a superior, faster, and more private version of the DNS protocol, even DoH and DoT.17 December 2020
VPNs, MFA & the Realities of Remote Work
The work-from-home-era is accelerating cloud-native service adoption.17 December 2020
This ‘off the shelf’ Tor backdoor malware is now a firm favorite with ransomware operators
SystemBC is making its mark as a popular tool used in high-profile ransomware campaigns.17 December 2020
IBM launches experimental homomorphic data encryption environment for the enterprise
Is it possible for fully homomorphic encryption to be a “game-changer” for data privacy? IBM intends to find out.17 December 2020
Operation SignSight: Supply‑chain attack against a certification authority in Southeast Asia
ESET researchers have uncovered a supply-chain attack on the website of a government in Southeast Asia.
The post Operation SignSight: Supply‑chain attack against a certification authority in Southeast Asia appeared first on WeLiveSecurity
17 December 2020
Phobos launches Orbital, a tool for finding attack pathways and entry points into your network
After months of work, teasing, and planning, Phobos Orbital is out of beta and available for trials.17 December 2020