well... news

csirt.cz

• Závažný bug v Microsoft Exchange Autodiscover funkci vyzrazuje uživatelská hesla
• Postřehy z bezpečnosti: zkuste to bez hesel, milý Marconi!
• Postřehy z bezpečnosti: jak útočníci vydělávají na konektivitě
• Postřehy z bezpečnosti: kritická chyba umožňovala špehování milionů IoT zařízení
• Postřehy z bezpečnosti: IIS v pavučině malware
• Postřehy z bezpečnosti: nabíjení elektromobilů zadarmo kvůli chybám ve stanichích
• Postřehy z bezpečnosti: RCE ve Western Digital MyCloud
• Postřehy z bezpečnosti: úpravny vod nejsou chráněny proti útokům
• Postřehy z bezpečnosti: světlá strana Síly vrací úder
• Postřehy z bezpečnosti: neopravitelná zranitelnost v procesoru Apple M1

darkreading.com

• What Is the Difference Between Security and Resilience?
• Consumers Share Security Fears as Risky Behaviors Persist
• TangleBot Campaign Underscores SMS Threat
• Contrast Application Security Platform Scales to Support OWASP Risks
• Our Eye Is on the SPARROW
• Endpoint Still a Prime Target for Attack
• Google Spots New Technique to Sneak Malware Past Detection Tools
• Primer: Microsoft Active Directory Security for AD Admins
• FamousSparrow APT Group Flocks to Hotels, Governments, Businesses
• SAIC Appoints Kevin Brown as Chief Information Security Officer
• Supply Chain and Ransomware Threats Drove 60% Increase in Global Cyber Intelligence Sharing Among Financial Firms
• BlackFog ARM 64 Edition Provides Anti Data Exfiltration Across New Patforms

krebsonsecurity.com

• Indictment, Lawsuits Revive Trump-Alfa Bank Story
• Does Your Organization Have a Security.txt File?
• Trial Ends in Guilty Verdict for DDoS-for-Hire Boss
• Customer Care Giant TTEC Hit By Ransomware
• Microsoft Patch Tuesday, September 2021 Edition
• KrebsOnSecurity Hit By Huge New IoT Botnet “Meris”
• Microsoft: Attackers Exploiting Windows Zero-Day Flaw
• “FudCo” Spam Empire Tied to Pakistani Software Firm
• Gift Card Gang Extracts Cash From 100k Inboxes Daily
• 15-Year-Old Malware Proxy Network VIP72 Goes Dark

nakedsecurity.sophos.com

• S3 Ep51: OMIGOD a gaping hole, waybill scams, and Face ID hacked [Podcast]
• STILL ALIVE! iOS 12 gets 3 zero-day security patches – update now
• How Outlook “autodiscover” could leak your passwords – and how to stop it
• VMware patch bulletin warns: “This needs your immediate attention.”
• iOS 15 launches with 22 documented security patches – including a Face ID bypass using a “3D model”
• “Back to basics” as courier scammers skip fake fees and missed deliveries
• OMIGOD, an exploitable hole in Microsoft open source code!
• S3 Ep50: Two 0-days plus another 0-day plus a fast food bug [Podcast]
• Apple products vulnerable to FORCEDENTRY zero-day attack – patch now!
• Serious Security: How to make sure you don’t miss bug reports!

nukib.cz

• Sedmý ročník CyberConu je u konce
• Národní úřad pro kybernetickou a informační bezpečnost (NÚKIB) vyzývá odbornou veřejnost k zasílání návrhů na změny zákona č. 181/2014 Sb., o kybernet[...]
• Evropské kompetenční centrum pro výzkum a vývoj v kybernetické bezpečnosti hledá svého výkonného ředitele
• Upozornění na závažné zranitelnosti ohrožující systémy Linux v Azure
• Zveřejnění dešifrovacího nástroje pro ransomware REvil
• NÚKIB vydává první dvě cloudové vyhlášky
• Upozornění na aktivní zneužívání zranitelnosti Microsoft Exchange Server - ProxyShell
• Kybernetické incidenty pohledem NÚKIB - červenec 2021
• Upozornění na zranitelnost HiveNightmare
• AKTUALIZACE 07.07.: Upozornění na zranitelnost PrintNightmare
• Základní bezpečnostní opatření pro vrcholové vedení
• Doporučení k používání protokolu TLP ke sdílení chráněných informací

scmagazine.com

• Microsoft warns zero-day in SolarWinds Serv-U software being exploited by Chinese threat group
• CMS interoperability rule enacted: How providers should tackle API security
• Strata automation tool looks to simplify cloud migration projects
• AWS offers free online training for cloud architects
• Websites repeatedly stalked by fraudulent copycats, say researchers
• New open data project looks to gauge success, failure of ransomware policy
• Microsoft fixes 117 vulnerabilities, four exploited in the wild
• Fashion brand Guess hacked, DarkSide ransomware group the likely culprit
• Major authentication and encryption weaknesses discovered in Schneider Electric, outdated ICS systems
• Report: Cyberattacks drive 185% spike in health care data breaches in 2021

securityaffairs.co

• Port of Houston was hit by an alleged state-sponsored attack
• JSC GREC Makeyev and other Russian entities under attack
• Security Affairs newsletter Round 333
• Google TAG spotted actors using new code signing tricks to evade detection
• GSS, one of the major European call center providers, suffered a ransomware attack
• Threat actors are attempting to exploit VMware vCenter CVE-2021-22005 flaw
• Google addressed the eleventh Chrome zero-day flaw this year
• European Union formally blames Russia for the GhostWriter operation
• CVE-2021-20034 flaw can allow SMA 100 device takeover, patch it now!
• Researcher released PoC exploit code for 3 iOS zero-day issues

securityweek.com

• States at Disadvantage in Race to Recruit Cybersecurity Pros
• EU Denounces Alleged Russian Hacking Ahead of German Vote
• FamousSparrow Cyberspies Exploit ProxyLogon in Attacks on Governments, Hotels
• Google Says Threat Actors Using New Code Signing Tricks to Evade Detection
• SonicWall Patches Critical Vulnerability in SMA Appliances
• LG to Acquire Vehicle Cybersecurity Firm Cybellum
• CISA Opens IPv6 Guidance to Public Feedback
• Port of Houston Target of Suspected Nation-State Hack
• F5 to Acquire Threat Stack for $68 Million in Cash
• Working Securely From Anywhere With Zero Trust
• Apple Confirms New Zero-Day Attacks on Older iPhones
• Improving Security Posture to Lower Insurance Premiums

thehackernews.com

• Urgent Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability
• SonicWall Issues Patches for a New Critical Flaw in SMA 100 Series Devices
• A New APT Hacker Group Spying On Hotels and Governments Worldwide
• Apple's New iCloud Private Relay Service Leaks Users' Real IP Addresses
• Google Warns of a New Way Hackers Can Make Malware Undetectable on Windows
• Cisco Releases Patches 3 New Critical Flaws Affecting IOS XE Software
• Urgent Apple iOS and macOS Updates Released to Fix Actively Exploited Zero-Days
• Microsoft Exchange Bug Exposes ~100,000 Windows Domain Credentials
• A New Bug in Microsoft Windows Could Let Hackers Easily Install a Rootkit
• Why You Should Consider QEMU Live Patching
• New Android Malware Targeting US, Canadian Users with COVID-19 Lures
• Colombian Real Estate Agency Leak Exposes Records of Over 100,000 Buyers

threatpost.com

• Exchange/Outlook Autodiscover Bug Spills $100K+ Email Passwords
• TangleBot Malware Reaches Deep into Android Device Functions
• Critical Cisco Bugs Allow Code Execution on Wireless, SD-WAN
• Apple Patches 3 More Zero-Days Under Active Attack
• REvil Affiliates Confirm: Leadership Were Cheating Dirtbags
• 5 Tips for Achieving Better Cybersecurity Risk Management
• 100M IoT Devices Exposed By Zero-Day Bug
• FamousSparrow APT Wings in to Spy on Hotels, Governments
• Google Report Spotlights Uptick in Controversial ‘Geofence Warrants’ by Police
• Acronis Offers up to $5,000 to Users Who Spot Bugs in Its Cyber Protection Products

tripwire.com-state-of-security

• US Government tells firms not to give in to ransomware demands
• CIS Control 5: Account Management
• Sextortion Scams – How They Persuade and What to Watch for
• Cybersecurity Maturity Model Certification (CMMC) – A Model for Everyone
• How to Report a Data Breach per GDPR
• The Digital Pandemic – Ransomware
• Everything You Need to Know about Cyber Crisis Tabletop Exercises
• To Detect or Not to Detect, Is that the Question?
• Partnerships – The Key to Navigating the Industrial Security Landscape
• CIS Control 4: Secure Configuration of Enterprise Assets and Software
• Understanding the Benefits of Managed Cyber Services
• VERT Threat Alert: September 2021 Patch Tuesday Analysis

Toto je souhrn titulků zpravodajských zdrojů, generovaný z jejich RSS/atom kanálů. Zdroje řazeny abecedně.
©opyright a zodpovědnost za obsah nesou autoři jednotlivých zdrojů.
Generováno Sun, 26 Sep 2021 23:04:02 +0200
poznámky a připomínky: klokanek (zavinovačka) eldar (bodka) cz