Cybersecurity News
Plugins
Every plugin or add-on you install in your browser can expose you to more danger. Only install the plugins you need and make sure they are always current. If you no longer need a plugin, disable or remove it from your browser via your browser's plugin preferences.08 April 2020
Microsoft to add DANE and DNSSEC support to Exchange Online servers
Support for both protocols to roll out in two phases, with the last completing by the end of 2021.08 April 2020
Privacy & Digital-Rights Experts Worry Contact-Tracing Apps Lack Limits
Mobile-phone-based tracking of people can help fight pandemics, but privacy and security researchers stress that it needs to be done right.07 April 2020
Chinese APT Groups Targeted Enterprise Linux Systems in Decade-Long Data Theft Campaign
Organizations across multiple industries compromised in a systematic effort to steal IP and other sensitive business data, BlackBerry says.07 April 2020
Cybercriminals Hide Malware & Phishing Sites Under SSL Certificates
More than half of the top 1 million websites use HTTPS, researchers report, but not all encrypted traffic is safe.07 April 2020
The Edge Names 'Holy Cow' Cartoon Caption Winners
What can cows possibly have to do with cybersecurity?
07 April 2020
Serious Exchange Flaw Still Plagues 350K Servers
The Microsoft Exchange vulnerability was patched in February and has been targeted by several threat groups.
07 April 2020
Chrome 81 released with initial support for the Web NFC standard
Chrome 81 was initially scheduled for release on March 17, but delayed to today due to the COVID-19 outbreak.07 April 2020
How Do I Make Sure My Work-From-Home Users Install Updates?
Most enterprise endpoint solutions will support policies to enforce recommended updates.
07 April 2020
Google backs Apple's SMS OTP standard proposal
Apple's proposal to standardize the format of SMS OTPs (one-time passcodes) moves to the WICG.07 April 2020
Mature DevOps Teams Are Secure DevOps Teams
New research shows the relationship between mature DevOps processes, secure applications, and happy developers.07 April 2020
The Coronavirus & Cybersecurity: 3 Areas of Exploitation
Criminal, political, and strategic factors are combining to create a perfect storm of cyber infections that target the global supply chain.
07 April 2020
xHelper: The Russian Nesting Doll of Android Malware
Ultimately delivering the Triada payload, xHelper goes to great lengths to become virtually indestructible once installed on a smartphone.
07 April 2020
FIN6 and TrickBot Combine Forces in ‘Anchor’ Attacks
FIN6 fingerprints were spotted in recent cyberattacks that initially infected victims with the TrickBot trojan, and then eventually downloaded the Anchor backdoor malware.
07 April 2020
71% of Security Pros See Threats Jump Since COVID-19 Outbreak
Phishing is the top threat, followed by websites offering false information about the pandemic, malware, and ransomware attacks.07 April 2020
Women in Payments: Q&A with Tracey Long
After 10 years on the police force, Tracey Long knew a thing or two about fraud. In this month’s blog series, Long explains how her former training was a natural path into cybersecurity and how both professions are all about getting people to comply.
07 April 2020
600,000 people affected in email provider breach
The users' personal data are now up for grabs on the dark web for anywhere between US$3,500 and US$22,000 worth of Bitcoin
The post 600,000 people affected in email provider breach appeared first on WeLiveSecurity
07 April 2020
Using Application Telemetry to Reveal Insider & Evasive Threats
Data from application processes and other systems leave a trail of threat crumbs that can be used to detect and shut down attacks.07 April 2020
Official Government COVID-19 Mobile Apps Hide a Raft of Threats
Android apps launched for citizens in Iran, Colombia and Italy offer cyberattackers new attack vectors.
07 April 2020
Microsoft Buys Corp.com So Bad Guys Can’t
In February, KrebsOnSecurity told the story of a private citizen auctioning off the dangerous domain corp.com for the starting price of $1.7 million. Domain experts called corp.com dangerous because years of testing have shown whoever wields it would have access to an unending stream of passwords, email and other sensitive data from hundreds of thousands of Microsoft Windows PCs at major companies around the globe. This week, Microsoft Corp. agreed to buy the domain in a bid to keep it out of the hands of those who might abuse its awesome power.07 April 2020