Cybersecurity News
Cybercrime Infrastructure Never Really Dies
Despite the takedown of the "CyberBunker" threat operators in 2019, command-and-control traffic continues to report back to the defunct network address space.23 June 2020
Hackbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments
Recent spearphishing emails spread the Hackbit ransomware using malicious Microsoft Excel attachments and the GuLoader dropper.
23 June 2020
5 Steps for Implementing Multicloud Identity
Why embracing, not fighting, decentralization will pave the way to smoother cloud migrations.23 June 2020
The Evolution of DevSecOps
A recent DivvyCloud survey found that in 2019, a majority of respondents reported being in the final optimization stages of their cloud journey, with 59% indicating they are in the DevOps Optimization stage (an 11% increase from 2018).
23 June 2020
Remote Workers Pose New Security Risks
Organizations sent workers home during COVID-19 lockdown without adequate security preparation.
23 June 2020
Evil Corp malware gang returns with WastedLocker ransomware
Evil Corp, one of the biggest malware operations on the planet, has slowly returned to life after the December 2019 DOJ charges.23 June 2020
New WastedLocker ransomware demands payments of millions of USD
Evil Corp, one of the biggest malware operations on the planet, has returned to life after the December 2019 DOJ charges with a new ransomware strain.23 June 2020
80,000 printers are exposing their IPP port online
Printers are leaking device names, locations, models, firmware versions, organization names, and even WiFi SSIDs.23 June 2020
Microsoft's 'Safe Documents' feature reaches general availability in Office 365
New Safe Documents feature available for all Office 365 E5 license holders.23 June 2020
Report: ‘BlueLeaks’ Exposes Sensitive Data From Police Departments
DDoSecrets has published data from over 200 police departments, law enforcement training and support resources and fusion centers.
22 June 2020
Pandemic Accelerates Priceline's 'Coffee Shop' Remote-Access Strategy
The travel-booking giant had been slowly starting to transition away from VPN dependence. Then COVID-19 happened, and suddenly 700 third-party call-center workers were working from home.22 June 2020
Microsoft Acquires IoT/OT Security Firm CyberX
Deal extends Microsoft Azure for legacy industrial devices.22 June 2020
How to Wring Out Every Last Drop of Your Security Budget
In the face of tighter budgets and lowered spending forecasts due to the pandemic, optimizing and improving the efficiency of security programs -- without sacrificing integrity -- has never been more important.
22 June 2020
Firmware Flaw Allows Attackers to Evade Security on Some Home Routers
Networking devices sold under at least one major brand have a firmware vulnerability that allows hackers to take control of the device, a cybersecurity firm claims.22 June 2020
Adobe Prompts Users to Uninstall Flash Player As EOL Date Looms
Adobe will prompt Flash Player users to uninstall the application before the Dec. 31, 2020 end of life date hits.
22 June 2020
Employees Say They're Working From Home Without Security Guidance
Working from home is new for many enterprise employees, yet many say they've received little in the way of new training or technology to keep them safe.22 June 2020
New privacy and security features announced at Apple's WWDC 2020
Proxy location sharing, new app privacy disclosure prompts, new webcam and microphone indicator in the iOS status bar.22 June 2020
AMD: Fixes For High-Severity SMM Callout Flaws Upcoming
AMD has fixed one high-severity vulnerability affecting its client and embedded processors; fixes for the other two will come out later in June.
22 June 2020
Scam uses Elon Musk’s name to trick people out of US$2 million in bitcoin
The giveaway scheme uses the tech titan’s name as part of Bitcoin addresses for extra credibility
The post Scam uses Elon Musk’s name to trick people out of US$2 million in bitcoin appeared first on WeLiveSecurity
22 June 2020
Long-Term Effects of COVID-19 on the Cybersecurity Industry
The maelstrom of change we're going through presents a unique opportunity to become enablers. And to do that requires flexibility.22 June 2020