Cybersecurity News
Intel CPUs vulnerable to new 'Snoop' attack
Applying the the patches for the Foreshadow (L1TF) attack disclosed in 2018 also blocks Snoop attacks.16 March 2020
Five Indicted on Romance and Lottery Fraud Charges
Fraudsters allegedly targeted elderly victims, ultimately wringing more than $4 million from their bank accounts.16 March 2020
Important Training Schedule Update: Instructor-Led Trainings (ILT) Canceled
With the primary concern for the safety of everyone involved, and the current uncertainty of global travel restrictions, PCI SSC has decided to cancel all instructor-led training (ILT) courses through the end of May 2020. The courses that are impacted by this cancellation are:
16 March 2020
Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges
An academic study found Microsoft's Edge browser to be the least private, due to it sending device identifiers and web browsing pages to back-end servers.
16 March 2020
Hellman & Friedman Acquires Checkmarx for $1.15B
The private equity firm will buy Checkmarx from Insight Partners, which will continue to own a minority interest.16 March 2020
Hellman & Friedman Acquires Checkmarx for $1.5B
The private equity firm will buy Checkmarx from Insight Partners, which will continue to own a minority interest.16 March 2020
Fewer Vulnerabilities in Web Frameworks, but Exploits Remain Steady
Attackers continue to focus on web and application frameworks, such as Apache Struts and WordPress, fighting against a decline in vulnerabilities, according to an analysis.16 March 2020
4 Ways Thinking 'Childishly' Can Empower Security Professionals
Younger minds -- more agile and less worried by failure -- provide a useful model for cyber defenders to think more creatively.16 March 2020
The Web’s Bot Containment Unit Needs Your Help
Anyone who's seen the 1984 hit movie Ghostbusters likely recalls the pivotal scene where a government bureaucrat orders the shutdown of the ghost containment unit, effectively unleashing a pent-up phantom menace on New York City. Now, something similar is in danger of happening in cyberspace: Shadowserver.org, an all-volunteer nonprofit organization that works to help Internet service providers (ISPs) identify and quarantine malware infections and botnets, has lost its longtime primary source of funding.16 March 2020
COVID‑19 and the forced workplace exodus
As the COVID-19 pandemic forces many employees to work from home, can your organization stay productive – and safe?
The post COVID‑19 and the forced workplace exodus appeared first on WeLiveSecurity
16 March 2020
Slack fixes vulnerability exploitable for session hijacking, account takeovers
Slack’s team jumped on the critical bug and patched the flaw within a matter of hours.16 March 2020
WordPress to add auto-update feature for themes and plugins
Auto-update feature is only available for the WordPress CMS core now. To be expanded for themes and plugins.16 March 2020
Security Technology Cannot Stop All Attacks
Technology alone cannot protect you. Bad guys are constantly developing new ways to get past firewalls, anti-virus and filters. You are the best defense against any attacker.16 March 2020
Microsoft Bing team launches COVID-19 tracker
Microsoft's COVID-19 tracker is located at bing.com/covid.15 March 2020
Browser vendor leaks data via open server
Blisk browser devs left an Elasticsearch server exposed online without a password.14 March 2020
Beware scams exploiting coronavirus fears
From malware-laden emails to fake donations, these are some of the most common cons you should watch out for amid the public health crisis
The post Beware scams exploiting coronavirus fears appeared first on WeLiveSecurity
13 March 2020
DDoS Attack Trends Reveal Stronger Shift to IoT, Mobile
Attackers are capitalizing on the rise of misconfigured Internet-connected devices running the WS-Discovery protocol, and mobile carriers are hosting distributed denial-of-service weapons.13 March 2020
Working from Home: COVID-19’s Constellation of Security Challenges
Organizations are sending employees and students home to work and learn -- but implementing the plan opens the door to more attacks, IT headaches and brand-new security challenges.
13 March 2020
WordPress Plugin Bug in Popup Builder Threatens 100K Websites
The high-severity flaw allows malicious code injection into website pop-up windows.
13 March 2020
Big BEC Bust Brings Down Dozens
Two dozen individuals have been named in the latest arrests of alleged participants in a business email compromise scheme that cost victims $30 million.13 March 2020