Cybersecurity News
ESET Threat Report
A view of the Q1 2020 threat landscape as seen by ESET telemetry and from the perspective of ESET threat detection and research experts
The post ESET Threat Report appeared first on WeLiveSecurity
29 April 2020
GitLab awards researcher $20,000, patches remote code execution bug
Engineers jumped on the issue which earned the researcher $1,000 at the point of triage.29 April 2020
Microsoft open-sources in-house library for handling QUIC connections
Microsoft says MsQuic will soon be part of most of its products, like Windows, .NET, Microsoft 365, and others.29 April 2020
National Security Agency releases guide to secure video conferencing
By William Knowles @c4i Senior Editor InfoSec News April 29, 2020 Last Friday, the National Security Agency released a guide aimed mainly towards U.S. Government employees and military service members are working from home, but is also ideal for business professionals on Selecting and Safely Using Collaboration Services for Telework. This cybersecurity guidance contains a […]29 April 2020
Adobe patches critical code, corruption bugs across Bridge, Illustrator, Magento
The company has squashed a range of critical flaws leading to arbitrary code execution.29 April 2020
Continued Use of Python 2 Will Heighten Security Risks
With support for the programming language no longer available, organizations should port to Python 3, security researches say.28 April 2020
Google discloses zero-click bugs impacting several Apple operating systems
Apple needs to follow in Google and Mozilla's footsteps and secure its multimedia processing libraries.28 April 2020
Enterprise Security Woes Explode with Home Networks in the Mix
Thanks to WFH, IoT refrigerators, Samsung TVs and more can now be back-channel proxies into the corporate network.
28 April 2020
Rapid7 Announces Plan to Buy DivvyCloud
The purchase will boost Rapid7's multicloud capabilities.28 April 2020
Would You Have Fallen for This Phone Scam?
You may have heard that today's phone fraudsters like to use use caller ID spoofing services to make their scam calls seem more believable. But you probably didn't know that your bank may be making it super easy for thieves to impersonate the bank, by giving away information about recent transactions on your account via automated, phone-based customer support systems.28 April 2020
‘Black Rose Lucy’ is Back, Now Pushing Ransomware
Researchers say incidents of mobile malware are becoming more common and growing more sophisticated.
28 April 2020
5-Year-Long Cyber Espionage Campaign Hid in Google Play
OceanLotus targeted Android devices in the so-called PhantomLance campaign.28 April 2020
Critical Adobe Illustrator, Bridge and Magento Flaws Patched
Adobe fixed critical flaws in Illustrator, Magento and Bridge in an out-of-band security update.
28 April 2020
5 Big Lessons from the Work-from-Home SOC
Accustomed to working in the same room, security teams now must find ways to operate effectively in the new remote reality.28 April 2020
Additional Remote Assessment Considerations During COVID-19
PCI SSC recognizes that in the current exceptional circumstances relating to COVID-19, entities are asking how they can support payment security and assessment activities while also dealing with new and unfamiliar issues related to the global pandemic.
28 April 2020
Increased Credential Threats in the Age of Uncertainty
Three things your company should do to protect credentials during the coronavirus pandemic.28 April 2020
Hackers threaten to leak data from high-end architecture firm Zaha Hadid
Hackers have stolen data from the company's network, encrypted everything with ransomware, and are now threatening to release files on the dark web if the company doesn't pay a ransom demand.28 April 2020
Hackers Leak Biopharmaceutical Firm’s Data Stolen in Ransomware Attack
The Clop ransomware group has reportedly leaked compromised data of biopharmaceutical company ExecuPharm after a recent cyberattack.
28 April 2020
WordPress Plugin Bug Opens 100K Websites to Compromise
Legions of website visitors could be infected with drive-by malware, among other issues, thanks to a CSRF bug in Real-Time Search and Replace.
28 April 2020