Cybersecurity News
How Do I Make Sure My Work-From-Home Users Install Updates?
Most enterprise endpoint solutions will support policies to enforce recommended updates.
07 April 2020
Google backs Apple's SMS OTP standard proposal
Apple's proposal to standardize the format of SMS OTPs (one-time passcodes) moves to the WICG.07 April 2020
Mature DevOps Teams Are Secure DevOps Teams
New research shows the relationship between mature DevOps processes, secure applications, and happy developers.07 April 2020
The Coronavirus & Cybersecurity: 3 Areas of Exploitation
Criminal, political, and strategic factors are combining to create a perfect storm of cyber infections that target the global supply chain.
07 April 2020
xHelper: The Russian Nesting Doll of Android Malware
Ultimately delivering the Triada payload, xHelper goes to great lengths to become virtually indestructible once installed on a smartphone.
07 April 2020
FIN6 and TrickBot Combine Forces in ‘Anchor’ Attacks
FIN6 fingerprints were spotted in recent cyberattacks that initially infected victims with the TrickBot trojan, and then eventually downloaded the Anchor backdoor malware.
07 April 2020
71% of Security Pros See Threats Jump Since COVID-19 Outbreak
Phishing is the top threat, followed by websites offering false information about the pandemic, malware, and ransomware attacks.07 April 2020
Women in Payments: Q&A with Tracey Long
After 10 years on the police force, Tracey Long knew a thing or two about fraud. In this month’s blog series, Long explains how her former training was a natural path into cybersecurity and how both professions are all about getting people to comply.
07 April 2020
600,000 people affected in email provider breach
The users' personal data are now up for grabs on the dark web for anywhere between US$3,500 and US$22,000 worth of Bitcoin
The post 600,000 people affected in email provider breach appeared first on WeLiveSecurity
07 April 2020
Using Application Telemetry to Reveal Insider & Evasive Threats
Data from application processes and other systems leave a trail of threat crumbs that can be used to detect and shut down attacks.07 April 2020
Official Government COVID-19 Mobile Apps Hide a Raft of Threats
Android apps launched for citizens in Iran, Colombia and Italy offer cyberattackers new attack vectors.
07 April 2020
Microsoft Buys Corp.com So Bad Guys Can’t
In February, KrebsOnSecurity told the story of a private citizen auctioning off the dangerous domain corp.com for the starting price of $1.7 million. Domain experts called corp.com dangerous because years of testing have shown whoever wields it would have access to an unending stream of passwords, email and other sensitive data from hundreds of thousands of Microsoft Windows PCs at major companies around the globe. This week, Microsoft Corp. agreed to buy the domain in a bid to keep it out of the hands of those who might abuse its awesome power.07 April 2020
9 Security Podcasts Worth Tuning In To
Recommendations for podcasts discussing news, trends, guidance, and stories across the cybersecurity industry.
07 April 2020
Europol arrests man for coronavirus business email scam peddling masks, sanitizer
European police continue to fight criminal activity linked to the spread of COVID-19.07 April 2020
Microsoft announces IPE, a new code integrity feature for Linux
Microsoft says IPE (Integrity Policy Enforcement) was designed for immutable and embedded systems (e.g. network firewall device in a data center).07 April 2020
Shopping Online Securely
When shopping online, always use your credit cards instead of a debit card. If any fraud happens, it is far easier to recover your money from a credit card transaction. Gift cards and one-time-use credit card numbers are even more secure.07 April 2020
Email provider got hacked, data of 600,000 users now sold on the dark web
Italian email provider Email.it confirms security breach.07 April 2020
More Attackers Have Begun Using Zero-Day Exploits
Vendors of offensive cyber tools have made it easy for any threat group with the right funds to leverage unpatched bugs, FireEye says.06 April 2020
Misconfigured Containers Again Targeted by Cryptominer Malware
An attack group is searching for insecure containers exposing the Docker API and then installing a program that attempts to mine cryptocurrency. It's not the first time.06 April 2020
Microsoft: Emotet Attack Shut Down an Entire Business Network
The infection started with a phishing email and spread throughout the organization, overheating all machines and flooding its Internet connection.06 April 2020