Cybersecurity News
Raytheon: Supply Chain, Ransomware, Zero Trust Biggest Security Priorities
SPONSORED CONTENT. While organizations may be more vulnerable than ever to supply chain hacks and ransomware, they can look to Zero Trust frameworks to keep their users and data safe, said Jon Check, a senior director in Raytheon's cyber protection solutions business unit. Check also foresees wider use of automation to handle tasks humans in the SOC can't get to.04 May 2021
More Companies Adopting DevOps & Agile for Security
Measures of programming speed, security, and automation have all significantly increased in the past year, GitLab's latest survey finds.04 May 2021
Pulse Secure VPNs Get a Fix for Critical Zero-Day Bugs
The security flaw tracked as CVE-2021-22893 is being used by at least two APTs likely linked to China, to attack U.S. defense targets among others.
04 May 2021
The Wages of Password Re-use: Your Money or Your Life
When normal computer users fall into the nasty habit of recycling passwords, the result is most often some type of financial loss. When cybercriminals develop the same habit, it can eventually cost them their freedom.04 May 2021
Scripps Health Responds to Cyberattack
The health care system says it has suspended access to patient portals and other applications related to operations at Scripps facilities.04 May 2021
Can Organizations Secure Remote Workers for the Long Haul?
By focusing on protection instead of detection, organizations can defend against targeted attacks without compromising security or productivity.04 May 2021
Microsoft will soon remove Flash Player from Windows 10 devices
The Patch Tuesday security update due in July should hammer the last nail in the coffin of Adobe Flash Player
The post Microsoft will soon remove Flash Player from Windows 10 devices appeared first on WeLiveSecurity
04 May 2021
Apple Fixes Zero‑Day Security Bugs Under Active Attack
On Monday, Apple released a quartet of unscheduled updates for iOS, macOS, and watchOS, slapping security patches on flaws in its WebKit browser engine.
04 May 2021
Hundreds of Millions of Dell Users at Risk from Kernel-Privilege Bugs
The privilege-escalation bug remained hidden for 12 years and has been present in all Dell PCs, tablets and notebooks shipped since 2009.
04 May 2021
Sneakers, Gaming, Nvidia Cards: Retailers Can Stop Shopping Bots
Jason Kent, hacker in residence at Cequence Security, says most retailers are applying 1970s solutions to the modern (and out-of-control) shopping-bot problem, and offers alternative ideas.
04 May 2021
Three new malware families found in global finance phishing campaign
Doubledrag, Doubledrop, and Doubleback are the work of “experienced” threat actors.04 May 2021
It's Time to Ditch Celebrity Cybersecurity
High-profile attacks and solutions are shiny objects that can distract from the defenses that afford the greatest protection.04 May 2021
Bait Boost: Phishers Delivering Increasingly Convincing Lures
An intense hunt for corporate account credentials will continue into next quarter, researchers predict.
04 May 2021
Patch issued to tackle critical security issues present in Dell driver software since 2009
Five critical security issues have been discovered.04 May 2021
Researchers Explore Active Directory Attack Vectors
Incident responders who investigate attacks targeting Active Directory discuss methods used to gain entry, elevate privileges, and control target systems.03 May 2021
Scripps Health Cyberattack Causes Widespread Hospital Outages
The San Diego-based hospital system diverted ambulances to other medical centers after a suspected ransomware attack.
03 May 2021
New Attacks Slaughter All Spectre Defenses
The 3+ years computer scientists spent concocting ways to defend against these supply-chain attacks against chip architecture? It's bound for the dustbin.
03 May 2021
Paving the way: Inspiring Women in Payments - A podcast featuring Anna-Magdalena Kohl
She started out pursuing a career in Human Resources, but soon learned it wasn’t the right fit. While pursuing her MBA, Anna-Magdalena Kohl took a chance on a work-study position at an IT security company, even though she had no formal technical training. It was a move that would define her career path. The company, in turn, took a chance on her, investing in her technical education. In this edition of our podcast, Anna-Magdalena explains that even without a technical background, many companies are very supportive and willing to provide on-the-job training opportunities – which can make all the difference in retaining women in the industry.
03 May 2021
Hewlett Packard Enterprise Plugs Critical Bug in Edge Platform Tool
Researchers warned that unpatched versions of HPE’s Edgeline Infrastructure Manager are open to remote authentication-bypass attacks.
03 May 2021
Name That Edge Toon: Magical May
Feeling creative? Submit your caption in the comments, and our panel of experts will reward the winner with a $25 Amazon gift card.
03 May 2021