Cybersecurity News


Microsoft Overhauls Patch Tuesday Security Update Guide

Microsoft Overhauls Patch Tuesday Security Update Guide Microsoft announced a new Security Guide to help cybersecurity profession more quickly untangle relevant bugs in its monthly security bulletins.
22 September 2020

Healthcare lags behind in critical vulnerability management, banks hold their ground

New research sheds light on which industries are performing well when it comes to patching high-risk bugs.
22 September 2020

Microsoft Extends Data Loss Prevention to Cloud App Security

The update, one of several announced today, is intended to help employees remain compliant when handling data across cloud applications.
22 September 2020

Firefox 81 Release Kills High-Severity Code-Execution Bugs

Firefox 81 Release Kills High-Severity Code-Execution Bugs Mozilla has fixed three high-severity flaws with the release of Firefox 81 and Firefox ESR 78.3.
22 September 2020

Activision Refutes Claims of 500K-Account Hack

Activision Refutes Claims of 500K-Account Hack The Call of Duty behemoth said that the reports of widespread hacks are false.
22 September 2020

Firefox 81 released with new browser theme

Other Firefox 81 features include a new look for the PDF viewer, support for auto-filling card data, and support for hardware media keys.
22 September 2020

Microsoft renames and unifies more products under Microsoft Defender brand

Microsoft Threat Protection, Defender ATP, Azure Security Center, and others brought under the Microsoft Defender umbrella brand.
22 September 2020

Google Cloud Buckets Exposed in Rampant Misconfiguration

Google Cloud Buckets Exposed in Rampant Misconfiguration A too-large percentage of cloud databases containing highly sensitive information are publicly available, an analysis shows.
22 September 2020

Permission Management & the Goldilocks Conundrum

In today's COVID-19 era, managing access has become even more difficult, especially for large organizations. Here's how to get it "just right."
22 September 2020

Nearly 70% of IT & Security Pros Hone Their Cyber Skills Outside of Work

New research shows how security skills are lacking across multiple IT disciplines as well - including network engineers, sys admins, and cloud developers.
22 September 2020

Russia wants to ban the use of secure protocols such as TLS 1.3, DoH, DoT, ESNI

Amendment to IT law would make it illegal to use encryption protocols that fully hide the traffic's destination.
22 September 2020

Details of 540,000 sports referees taken in failed ransomware attack

ArbiterSports said it paid the hackers to delete the stolen data — a database backup.
21 September 2020

Member of 'The Dark Overlord' hacking group sentenced to five years in prison

UK national Nathan Wyatt gets five years in prison after pleading guilty today.
21 September 2020

Remote Work Exacerbating Data Sprawl

More than three-quarters of IT executives worry that data sprawl puts their data at risk, especially with employees working from insecure home networks, survey finds.
21 September 2020

Fileless Malware Tops Critical Endpoint Threats for 1H 2020

Fileless Malware Tops Critical Endpoint Threats for 1H 2020 When it comes to endpoint security, a handful of threats make up the bulk of the most serious attack tools and tactics.
21 September 2020

'Dark Overlord' Cyber Extortionist Pleads Guilty

Nathan Wyatt was sentenced to five years in prison after changing a previously not guilty plea.
21 September 2020

Unsecured Microsoft Bing Server Leaks Search Queries, Location Data

Unsecured Microsoft Bing Server Leaks Search Queries, Location Data Data exposed included search terms, location coordinates, and device information - but no personal data.
21 September 2020

DHS Issues Dire Patch Warning for ‘Zerologon’

DHS Issues Dire Patch Warning for ‘Zerologon’ The deadline looms for U.S. Cybersecurity and Infrastructure Security Agency’s emergency directive for federal agencies to patch against the so-called ‘Zerologon’ vulnerability.
21 September 2020

PCI PIN Security in Practice Case Study: Gertec

 

In this PCI DSS in Practice Case Study, Brazil Regional Engagement Board Member Gertec shares how the PCI PIN Security requirements helped the organization to understand the importance of having procedures in place and up to date.

21 September 2020

Microsoft secures backend server that leaked Bing data

No personal user data was leaked in the incident.
21 September 2020