Cybersecurity News
What Government Contractors Need to Know About NIST, DFARS Password Reqs
Organizations that fail to comply with these rules can get hit with backbreaking fines and class-action lawsuits.03 June 2020
TrickBot Adds BazarBackdoor to Malware Arsenal
![TrickBot Adds BazarBackdoor to Malware Arsenal TrickBot Adds BazarBackdoor to Malware Arsenal](https://media.threatpost.com/wp-content/uploads/sites/103/2020/06/03123154/backdoor-150x150.jpg)
03 June 2020
Critical SAP ASE Flaws Allow Complete Control of Databases
![Critical SAP ASE Flaws Allow Complete Control of Databases Critical SAP ASE Flaws Allow Complete Control of Databases](https://media.threatpost.com/wp-content/uploads/sites/103/2020/06/03113429/SAP-patches-150x150.jpg)
03 June 2020
Large-scale attack tries to steal configuration files from WordPress sites
Attackers tried to download configuration files from WordPress sites so they could steal database credentials.03 June 2020
Many Exchange Servers Are Still Vulnerable to Remote Exploit
A privilege-escalation vulnerability patched in February by Microsoft continues to affect Exchange servers, with more than 80% of Internet-connected servers remaining vulnerable, one firm reports.03 June 2020
Facebook now lets you delete old posts in bulk
Dealing with skeletons lurking in your Facebook closet has never been easier
The post Facebook now lets you delete old posts in bulk appeared first on WeLiveSecurity
03 June 2020
Social Distancing for Healthcare's IoT Devices
Security pros need to double down around prevention of lateral movement by attackers, especially if IoT devices are connected to the network.03 June 2020
Enterprise Mobile Phishing Attacks Skyrocket Amidst Pandemic
![Enterprise Mobile Phishing Attacks Skyrocket Amidst Pandemic Enterprise Mobile Phishing Attacks Skyrocket Amidst Pandemic](https://media.threatpost.com/wp-content/uploads/sites/103/2020/06/03094019/phish-fish-150x150.jpg)
03 June 2020
Facebook software engineer resigns with scathing criticism of the network’s refusal to act on ‘weaponized hatred’
The former Facebook employee accuses the social network of allowing “politicians to radicalize individuals and glorify violence.”03 June 2020
Tor’s latest release makes it easier to find secure onion services
Tor Browser 9.5 is also working towards making Dark Web addresses easier to remember.03 June 2020
Google opens up Advanced Protection Program to Nest devices
The move follows integration with services including Android and Chrome.03 June 2020
Joomla Resources Directory Users Exposed in Leaky AWS Bucket
![Joomla Resources Directory Users Exposed in Leaky AWS Bucket Joomla Resources Directory Users Exposed in Leaky AWS Bucket](https://media.threatpost.com/wp-content/uploads/sites/103/2019/01/03114745/data-breach-150x150.jpeg)
03 June 2020
Ransomware gang says it breached one of NASA's IT contractors
DopplePaymer ransomware gang claims to have breached DMI, a major US IT and cybersecurity provider, and one of NASA IT contractors.02 June 2020
10 Tips for Maintaining Information Security During Layoffs
![10 Tips for Maintaining Information Security During Layoffs 10 Tips for Maintaining Information Security During Layoffs](https://img.deusm.com/darkreading/theedge/SS_layoffs2/01_layoffs_602x250.jpg)
02 June 2020
Mobile Phishing Attacks Increase Sharply
Organizations need to include smartphones and tablets in their phishing mitigation strategies, a new report suggests.02 June 2020
New cold boot attack affects seven years of LG Android smartphones
LG has released a firmware fix in May 2020. Attack requires physical access.02 June 2020
Companies Fall Short on Mandatory Reporting of Cybercrimes
Understaffed and under fire, companies fail to report cybercrimes even when they are legally obligated to notify authorities, results of a new survey show.02 June 2020
Amtrak Breach Rolls Over Frequent Travelers
The breach exposed usernames and passwords of an undisclosed number of program members.02 June 2020
REvil Ransomware Gang Starts Auctioning Victim Data
The criminal group behind the REvil ransomware enterprise has begun auctioning off sensitive data stolen from companies hit by its malicious software. The move marks an escalation in tactics aimed at coercing victims to pay up -- and publicly shaming those don't. But it may also signal that ransomware purveyors are searching for new ways to profit from their crimes as victim businesses struggle just to keep the lights on during the unprecedented economic slowdown caused by the COVID-19 pandemic.02 June 2020
Risk Assessment & the Human Condition
Five lessons the coronavirus pandemic can teach security professionals to better assess, monitor, manage, and mitigate organizational risk.02 June 2020