Cybersecurity News
The Cybersecurity Maturity Model Certification: Are You in Compliance?
Not only can this framework help companies remain solvent, but it will also protect critical information from getting into the wrong hands.20 October 2020
Making a Difference: Accor
The PCI Security Standards Council (PCI SSC) recently announced the nomination period for the next PCI SSC Board of Advisors. The Board of Advisors represents PCI SSC Participating Organizations worldwide to ensure global industry involvement in the development of PCI Security Standards. As strategic partners, they bring industry, geographical and technical insight to PCI Council plans and projects. In this post, we talk with 2018 - 2020 PCI SSC Board of Advisor Member Marie-Christine Vittet, Vice President Compliance, at Accor about the role of the PCI SSC Board of Advisors in shaping payment security globally.
20 October 2020
Facebook: A Top Launching Pad For Phishing Attacks
Amazon, Apple, Netflix, Facebook and WhatsApp are top brands leveraged by cybercriminals in phishing and fraud attacks - including a recent strike on a half-million Facebook users.
20 October 2020
Farsight Labs Launched as Security Collaboration Platform
Farsight Security's platform will offer no-cost access to certain tools and services.20 October 2020
Pharma Giant Pfizer Leaks Customer Prescription Info, Call Transcripts
Hundreds of medical patients taking cancer drugs, Premarin, Lyrica and more are now vulnerable to phishing, malware and identity fraud.
20 October 2020
Businesses Rethink Endpoint Security for 2021
The mass movement to remote work has forced organizations to rethink their long-term plans for endpoint security. How will things look different next year?20 October 2020
NSA publishes list of Top 25 vulnerabilities currently targeted by Chinese hackers
NSA urges US public and private sector to apply patches or mitigations to prevent attacks.20 October 2020
Office 365 OAuth Attack Targets Coinbase Users
Attackers are targeting Microsoft Office 365 users with a Coinbase-themed attack, aiming to take control of their inboxes via OAuth.
20 October 2020
Building the Human Firewall
Cybersecurity was a challenge before COVID-19 sent millions of employees home to work from their own devices and networks. Now what?20 October 2020
Google removes two Chrome ad blockers caught collecting user data
Nano Adblocker and Nano Defender have been removed from the official Chrome Web Store.20 October 2020
Mobile Browser Bugs Open Safari, Opera Users to Malware
A set of address-spoofing bugs affect users of six different types of mobile browsers, with some remaining unpatched.
20 October 2020
Confronting Data Risk in the New World of Work
With Stanford research showing that nearly half of the U.S. labor force is now working from home full-time, insider threats are a much more difficult problem.
20 October 2020
Seven mobile browsers vulnerable to address bar spoofing attacks
Vulnerabilities allow attackers to trick users into accessing malicious sites while showing the incorrect URL in the address bar.20 October 2020
Trickbot Tenacity Shows Infrastructure Resistant to Takedowns
Both the US Cyber Command and a Microsoft-led private-industry group have attacked the infrastructure used by attackers to manage Trickbot -- but with only a short-term impact.20 October 2020
Google’s Waze Can Allow Hackers to Identify and Track Users
The company already patched an API flaw that allowed a security researcher to use the app to find the real identity of drivers using it.
20 October 2020
Ransomware gang donates part of ransom demands to charity organizations
The Darkside ransomware gang has donated $10K it received as part of ransom demands to Children International and The Water Project.20 October 2020
How safe is your USB drive?
What are some of the key security risks to be aware of when using USB flash drives and how can you mitigate the threats?
The post How safe is your USB drive? appeared first on WeLiveSecurity
20 October 2020
UK says Russia was preparing cyber-attacks against the Tokyo Olympics
Targets included the Games' organizers, logistics services, and sponsors, UK officials said.19 October 2020
NSS Labs Shuttered
The testing firm's website says it has 'ceased operations' as of Oct. 15.19 October 2020
Russian Military Officers Unmasked, Indicted for High-Profile Cyberattack Campaigns
US Department of Justice charges members of Sandworm/APT28 for BlackEnergy, NotPetya, Olympic Destroyer, and other major attacks.19 October 2020