Cybersecurity News
DHS CISA and FBI share list of top 10 most exploited vulnerabilities
Office is the most exploited technology, followed by Apache Struts.13 May 2020
Huawei denies involvement in buggy Linux kernel patch proposal
Huawei says employee submitted code as part of a personal project, not on behalf of the company.12 May 2020
Website Attacks Become Quieter & More Persistent
Threat actors have pivoted from noisy attacks to intrusions where stealth and ROI are primary goals, new report says.12 May 2020
Microsoft Fixes 111 Vulnerabilities for Patch Tuesday
This marks the third month in a row that Microsoft patched more than 100 bugs, of which 16 are classified as critical.12 May 2020
Thunderbolt flaws open millions of PCs to physical hacking
A new attack method enables bad actors to access data on a locked computer via an evil maid attack within 5 minutes
The post Thunderbolt flaws open millions of PCs to physical hacking appeared first on WeLiveSecurity
12 May 2020
Microsoft Patch Tuesday, May 2020 Edition
Microsoft today issued software updates to plug at least 111 security holes in Windows and Windows-based programs. None of the vulnerabilities were labeled as being publicly exploited or detailed prior to today, but as always if you're running Windows on any of your machines it's time once again to prepare to get your patches on.12 May 2020
Nine in 10 Applications Contain Outdated Software Components
Almost every application uses open-source components and 91% use libraries that are out of date or that have been abandoned altogether.12 May 2020
Secure Contact Tracing Needs More Transparent Development
Experts worry that without proper planning, today's decisions about developing contact-tracing apps could have unforeseen consequences in the years to come.12 May 2020
REvil Ransomware Attack Hits A-List Celeb Law Firm
Cybercriminals used the REvil ransomware to attack a law firm used by the likes of Lady Gaga, Drake and Madonna. Now, they're threatening to leak the 756 gigabytes of stolen data.
12 May 2020
Google removed 813 creepware apps from the Android Play Store
The applications were discovered with a new algorithm called CreepRank, developed by a team of academics.12 May 2020
DHS, FBI & DoD Report on New North Korean Malware
Three new reports detail malware coming out of the Hidden Cobra cyber operations in North Korea.12 May 2020
Microsoft Addresses 111 Bugs for May Patch Tuesday
Important-rated EoP flaws made up the bulk of the CVEs; SharePoint continued its critical run with four worrying bugs.
12 May 2020
Three Years After WannaCry, Ransomware Accelerating While Patching Still Problematic
Using a known exploit to infect unmaintained systems, the WannaCry ransomware worm remains a study in preventable catastrophes. Yet many companies continue to ignore its lessons.12 May 2020
The Modern SOC Demands New Skills
Automation and other technologies are improving the organizational structure of the security operations center. This is ultimately for the better, but it means that roles will change too.12 May 2020
Microsoft May 2020 Patch Tuesday fixes 111 vulnerabilities
Third-largest Patch Tuesday in Microsoft's history started rolling out earlier today.12 May 2020
On the three-year anniversary of WannaCry, US exposes new North Korean malware
US cyber-security officials expose today three new North Korean malware strains named COPPERHEDGE, TAINTEDSCRIBE, and PEBBLEDASH.12 May 2020
A-List Celebrity Law Firm Confirms Cyberattack
Attackers claim to steal 756GB of data from Grubman Shire Meiselas & Sacks, which includes Madonna and Lady Gaga among its clients.12 May 2020
WordPress Page Builder Plugin Bugs Threaten 1 Million Sites with Full Takeover
Severe CSRF to XSS bugs open the door to code execution and complete website compromise.
12 May 2020
Adobe Kills 16 Critical Flaws in Acrobat and Reader, Digital Negative SDK
Adobe patched 36 flaws, including critical vulnerabilities in Acrobat and Reader and its DNG Software Development Kit.
12 May 2020
Coronavirus, Data Privacy & the New Online Social Contract
How governments can protect personal privacy in contact tracing while saving peoples' lives12 May 2020