Cybersecurity News
Why Secure Email Gateways Rewrite Links (and Why They Shouldn't)
Redirecting a user to a trusted server buys a secure email gateway company some time while it decides whether a URL is malicious -- but there are avoidable drawbacks to this approach.
16 December 2020
SSO and MFA Are Only Half Your Identity Governance Strategy
We need better ways to manage user identities for accessing applications, especially given the strain it places on overworked IT and security teams.16 December 2020
FICO launches cryptocurrency trade risk solution for banks
The software will bring crypto risk assessment to KYC processes.16 December 2020
Cybersecurity Advent calendar: Stay close to one another… Safely!
This year, many of us will be celebrating Christmas with our loved ones virtually, however we shouldn’t underestimate the value of securing our online communication.
The post Cybersecurity Advent calendar: Stay close to one another… Safely! appeared first on WeLiveSecurity
16 December 2020
New Goontact spyware discovered targeting Android and iOS users
Most Goontact-laced apps are targeting Asian users in Chinese speaking countries, Korea, and Japan.16 December 2020
SolarWinds said no other products were compromised in recent hack
SolarWinds has released today updates that "replaces the compromised component" in its Orion platform.15 December 2020
Microsoft to quarantine SolarWinds apps linked to recent hack starting tomorrow
After only showing detection alerts, Microsoft moves to block trojanized SolarWinds apps from running, opening the door for some IT issues for some of its customers.15 December 2020
Concerns Run High as More Details of SolarWinds Hack Emerge
Enterprises running company's Orion network management software should assume compromise and respond accordingly, security experts say.15 December 2020
Twitter Fined in Irish GDPR Action
The $547K fine results from an issue Twitter reported in 2019.15 December 2020
Subway Sandwich Loyalty-Card Users Suffer Ham-Handed Phishing Scam
Subway loyalty program members in U.K. and Ireland have been sent scam emails to trick them into downloading malware.
15 December 2020
Easy WP SMTP Security Bug Can Reveal Admin Credentials
A poorly configured file opens users up to site takeover.
15 December 2020
Gitpaste-12 Worm Widens Set of Exploits in New Attacks
The worm returned in recent attacks against web applications, IP cameras and routers.
15 December 2020
Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome
Mozilla Foundation releases Firefox 84 browser, fixing several flaws and delivering performance gains and Apple processor support.
15 December 2020
Medical Imaging Leaks Highlight Unhealthy Security Practices
More than 45 million unique images, such as X-rays and MRI scans, are accessible to anyone on the Internet, security firm says.15 December 2020
Microsoft and industry partners seize key domain used in SolarWinds hack
By seizing the domain, Microsoft and its partners hope to identify all victims, but are also preventing attackers from escalating intrusions in currently infected networks.15 December 2020
Medical scans of millions of patients exposed online
Other leaked data included a range of personal information such as names, addresses and personal healthcare information.
The post Medical scans of millions of patients exposed online appeared first on WeLiveSecurity
15 December 2020
45M Medical Imaging Files Left Accessible Online
A range of medical images, including X-rays and CT scans, were exposed on more than 2,140 unprotected servers, researchers report.15 December 2020
Nowhere to Hide: Don't Let Your Guard Down This Holiday Season
Harden your defenses to ensure that your holiday downtime doesn't become an open door for cyber threats.
15 December 2020
SolarWinds Hack Could Affect 18K Customers
The still-unfolding breach at network management software firm SolarWinds may have resulted in malicious code being pushed to nearly 18,000 customers, the company said in a legal filing on Monday. Meanwhile, Microsoft should soon have some idea which and how many SolarWinds customers were affected, as it recently took possession of a key domain name used by the intruders to control infected systems.15 December 2020
45 Million Medical Images Left Exposed Online
A six-month investigation by CybelAngel discovered unsecured sensitive patient data available for third parties to access for blackmail, fraud or other nefarious purposes.
15 December 2020