9779
🗞 The best daily news about cyber security and privacy. 🔔 Daily publications. 💻 Is your life on the internet safe? 📩 lalilolalo.dev@gmail.com
🕴 How the Evolving Role of the CISO Impacts Cybersecurity Startups 🕴CISOs and vendors must work together to keep up with emerging threats and find solutions, says a group of CISOs and security entrepreneurs.
📖 Read
via "Dark Reading".
🕴 A Detection and Response Benchmark Designed for the Cloud 🕴Does your security operation center's performance meet the 5/5/5 benchmark for cloud threat detection and incident response?
📖 Read
via "Dark Reading".
🕴 VicOne and Block Harbor Deliver Integrated Workflow-Based Cybersecurity System 🕴
📖 Read
via "Dark Reading".
🕴 British Library Confirms Ransomware Attack Caused Outages 🕴The library said that it expects many of its services to be restored in the forthcoming weeks.
📖 Read
via "Dark Reading".
🕴 Shadowy Hack-for-Hire Group Behind Sprawling Web of Global Cyberattacks 🕴For several years operators at New Delhi-based Appin hacked into, spied on, and stole data from targets around the world for clients that included private investigators, government agencies, law enforcement, and others.
📖 Read
via "Dark Reading".
🦿 How Do Password Managers Work and Why Do You Need One? 🦿Learn how password managers work, their benefits, and why your organization needs one to secure sensitive data and prevent security breaches.
📖 Read
via "Tech Republic".
🛠 Web-Based Firewall Logging Tool 1.1.3 🛠Webfwlog is a Web-based firewall log reporting and analysis tool. It allows users to design reports to use on logged firewall data in whatever configuration they desire. Included are sample reports as a starting point. Reports can be sorted with a single click, or "drilled-down" all the way to the packet level, and saved for later use. Supported log formats are netfilter, ipfilter, ipfw, ipchains, and Windows XP. Netfilter support includes ulogd MySQL or PostgreSQL database logs using the iptables ULOG target.
📖 Read
via "Packet Storm Security".
🦿 8 Best Enterprise Password Managers for 2023 🦿Explore the best enterprise password managers that provide security and centralized control for managing and protecting passwords across your organization.
📖 Read
via "Tech Republic".
🕴 'CacheWarp' AMD VM Bug Opens the Door to Privilege Escalation 🕴Academics in Germany figured out how to reverse time in AMD virtualization environments, then reap the spoils.
📖 Read
via "Dark Reading".
🕴 'Randstorm' Bug: Millions of Crypto Wallets Open to Theft 🕴The security vulnerability in a component of a widely used JavaScript implementation of Bitcoin makes passwords guessable via brute-force attacks.
📖 Read
via "Dark Reading".
🕴 Unpatched Critical Vulnerabilities Open AI Models to Takeover 🕴The security holes can allow server takeover, information theft, model poisoning, and more.
📖 Read
via "Dark Reading".
🛠 Wireshark Analyzer 4.2.0 🛠Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. This is the source code release.
📖 Read
via "Packet Storm Security".
🦿 Intel Patches Widespread Processor Vulnerability 🦿The strange vulnerability could have allowed for escalation of privilege, denial of service or information disclosure attacks.
📖 Read
via "Tech Republic".
🕴 Egress and KnowBe4 Extend Partnership to Offer AI-based Adaptive Email Security and Training 🕴
📖 Read
via "Dark Reading".
🕴 Rackspace Ransomware Costs Soar to Nearly $12M 🕴Rackspace's 2022 ransomware attack only continue to mount, with lawsuits in the offing — and show the long-tail costs of a cyberattack.
📖 Read
via "Dark Reading".
🕴 Leveraging Sandbox and Threat Intelligence Feeds to Combat Cyber Threats 🕴Combining a malware sandbox with threat intelligence feeds improves security detection, analysis, and response capabilities.
📖 Read
via "Dark Reading".
🕴 Hackers Weaponize SEC Disclosure Rules Against Corporate Targets 🕴Ransomware group BlackCat/ALPHV files SEC complaint against its latest victim, putting an audacious new twist on cyber extortion tactics.
📖 Read
via "Dark Reading".
🕴 CompTIA Advises Retailers to Check their Cybersecurity Preparedness Ahead of the Holiday Shopping Season 🕴
📖 Read
via "Dark Reading".
🕴 Scattered Spider Casino Hackers Evade Arrest in Plain Sight 🕴The feds seem to know all about the hacking group brazenly breaking into corporate networks; so why are enterprise teams left on their own to stop their cybercrimes?
📖 Read
via "Dark Reading".
🕴 Actions to Take to Defeat Initial Access Brokers 🕴Initial access brokers (IAB) are often difficult to track. This Tech Tip spells out some countermeasures enterprises need to defend against stolen credentials.
📖 Read
via "Dark Reading".
🕴 Hands Off the Security Budget! Find Efficiencies to Reduce Risk 🕴Security budgets will benefit from new priorities, streamlined responses rather than wholesale cost-cutting in light of cyberattacks and increased regulatory requirements.
📖 Read
via "Dark Reading".
🕴 Detection & Response That Scales: A 4-Pronged Approach 🕴Building a resilient incident response team requires more than a simple combination of tools and on-call rotations.
📖 Read
via "Dark Reading".
🕴 Dangerous Apache ActiveMQ Exploit Allows Stealthy EDR Bypass 🕴There's no time to waste: For organizations on the fence about patching the critical bug in ActiveMQ, the new proof-of-concept exploit should push them towards action.
📖 Read
via "Dark Reading".
♟️ Alleged Extortioner of Psychotherapy Patients Faces Trial ♟️Prosecutors in Finland this week commenced their criminal trial against Julius Kivimäki, a 26-year-old Finnish man charged with extorting a once popular and now-bankrupt online psychotherapy practice and thousands of its patients. In a 2,200-page report, Finnish authorities laid out how they connected the extortion spree to Kivimäki, a notorious hacker who was convicted in 2015 of perpetrating tens of thousands of cybercrimes, including data breaches, payment fraud, operating a botnet and calling in bomb threats.
📖 Read
via "Krebs on Security".
🕴 Consumer Software Security Assessment: Should We Follow NHTSA's Lead? 🕴Vehicles are required to meet basic safety standards. Having similar requirements for software would give consumers greater control over their privacy and security.
📖 Read
via "Dark Reading".
🕴 FBI Warns: Five Weeks In, Gaza Email Scams Still Thriving 🕴Cybercriminals are playing both sides with simple disaster scams, and it's working.
📖 Read
via "Dark Reading".
🕴 3 Ways Behavioral Economics Obstructs Cybersecurity 🕴People are not robots; their decisions are based on emotion as much as data. Often, this can lead them to make mistakes with serious security implications for the business.
📖 Read
via "Dark Reading".
🦿 Microsoft Ignite: New Solutions Offer More Security and Productivity from Windows in the Cloud 🦿Cloud PCs give you access to Windows AI tools on any device, and Windows 365 now has AI-powered tools to help IT give users the right cloud PC for their needs.
📖 Read
via "Tech Republic".
🕴 ALTR Closes $25M Series C Financing 🕴
📖 Read
via "Dark Reading".
🕴 'AlphaLock' Hacker Organization Launches Pen-Testing Training Group 🕴With a two-pronged approach, the group trains its hackers in penetration testing, only to set them free to build a marketplace for pen-testing services.
📖 Read
via "Dark Reading".