well... news

csirt.cz

• Zranitelnost nástroje VMware View Planner
• Postřehy z bezpečnosti: Bitcoin na falešných investičních webech
• Další dva díly seriálu Praktické základy kybernetické bezpečnosti
• Postřehy z bezpečnosti: prohlížeč Chrome ohrožen útokem CacheFlow
• Kritické zranitelnosti Cisco VPN routerů pro malé podniky
• Pozor na aktuální podvodnou kampaň zneužívající značku DHL
• Apple varuje před třemi zranitelnostmi v iOS, které byly zneužívány k útokům
• Zranitelnost v příkazu sudo umožňuje lokálním uživatelům získat práva uživatele root
• Pozor na nový Android malware šířící se přes WhatsApp
• Nový seriál: Praktické základy kybernetické bezpečnosti

darkreading.com

• Microsoft Exchange Server Exploits Hit Retail, Government, Education
• Microsoft Adopted an 'Aggressive' Strategy for Sharing SolarWinds Attack Intel
• 5 Ways Social Engineers Crack Into Human Beings
• Realistic Patch Management Tips, Post-SolarWinds
• On International Women's Day 2021, Does the 'Rule of Steve' Still Apply? Yes.
• Encrypted Traffic Strategies
• Make Sure That Stimulus Check Lands in the Right Bank Account
• Business Apps Spoofed in 45% of Impersonation Attacks
• Healthcare Still Seeing High Level of Attacker Activity
• Microsoft, FireEye Uncover More Malware Used in the SolarWinds Campaign
• John McAfee Charged in 'Pump & Dump' Cryptocurrency Scheme
• Secure Laptops & the Enterprise of the Future

krebsonsecurity.com

• At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software
• Three Top Russian Cybercrime Forums Hacked
• Microsoft: Chinese Cyberspies Used 4 Exchange Server Flaws to Plunder Emails
• Payroll/HR Giant PrismHR Hit by Ransomware?
• Is Your Browser Extension a Botnet Backdoor?
• How $100M in Jobless Claims Went to Inmates
• Checkout Skimmers Powered by Chip Cards
• Mexican Politician Removed Over Alleged Ties to Romanian ATM Skimmer Gang
• U.S. Indicts North Korean Hackers in Theft of $200 Million
• Bluetooth Overlay Skimmer That Blocks Chip

nakedsecurity.sophos.com

• Poison packages – “Supply Chain Risks” user hits Python community with 4000 fake modules
• Using TikTok? Check out these six security tips
• S3 Ep22: Cryptographic escapes and social media scams [Podcast]
• Another Chrome zero-day exploit – so get that update done!
• How (NOT?!) to jailbreak your iPhone
• I see you: your home-working photos reveal more than you think!
• Search crimes – how the Gootkit gang poisons Google searches
• Naked Security Live – Beware copyright scams
• S3 Ep21: Cryptomining clampdown, the 100-ton man, and ScamClub ads [Podcast]
• Keybase secure messaging fixes photo-leaking bug – patch now!

nukib.cz

• Vyjádření k aktuální situaci
• Kurz Bezpečně v kyber! se otevírá veřejnosti
• Upozornění na zranitelnosti Exchange Server
• Upozornění na kritickou zranitelnost produktu VMWare vCenter Server
• NÚKIB spolu s izraelskými partnery zorganizoval Executive Cyber Workshop
• Upozornění na kritické zranitelnosti v systémech Windows
• NÚKIB se opět zapojí do osvětových aktivit v rámci Dne bezpečnějšího internetu
• Nový osvětový videokurz
• Upozornění na zranitelnost v programu sudo v operačních systémech Unix, Linux a MacOS
• Zničení infrastruktury Emotet
• Základní bezpečnostní opatření pro vrcholové vedení
• Doporučení k používání protokolu TLP ke sdílení chráněných informací

scmagazine.com

• Government briefed on breach of at least 30,000 Microsoft Exchange Servers
• Public companies may not grasp responsibility to investors in sharing info on cyber risk
• ‘Educational’ ransomware program may instead become a how-to guide for attackers
• Through automation, New Belgium Brewing has privacy on tap
• When lawyers get hacked: How law firms grapple with risk tied to supply chain breaches
• Scammers impersonate execs to target big payout of investor dollars
• NSA, CISA issue guidance on Protective DNS services
• BlackGirlsHack founder: ‘I’m trying to change what the next generation of cybersecurity looks like’
• Microsoft links new malware to SolarWinds hackers
• Hackers, nation-states target US black community to commit fraud, sow division

securityaffairs.co

• Chinese hackers allegedly hit thousands of organizations using Microsoft Exchange
• Russia-linked APT groups exploited Lithuanian infrastructure to launch attacks
• Security Affairs newsletter Round 304
• REvil Ransomware gang uses DDoS attacks and voice calls to make pressure on the victims
• Multiple Cisco products exposed to DoS attack due to a Snort issue
• Hackers breached four prominent underground cybercrime forums
• Microsoft releases IOC Detection Tool for Microsoft Exchange Server flaws
• Millions of travelers of several airlines impacted by SITA data breach
• GoldMax, GoldFinder, and Sibot, 3 new malware used by SolarWinds attackers
• Managed Services provider CompuCom by Darkside ransomware

securityweek.com

• Casting a Wide Intrusion Net: Dozens Burned With Single Hack
• F1 Team Williams Unveils New Car After Hackers Foil Launch
• Microsoft Shares Additional Mitigations for Exchange Server Vulnerabilities Under Attack
• Software Icon McAfee Charged in Cryptocurrency Scam
• Thousands of Mobile Apps Expose Data via Misconfigured Cloud Containers
• Ransomware Takedowns Underscore Need for Private-Public Cybersecurity Collaboration
• Multiple Airlines Impacted by Data Breach at Aviation IT Firm SITA
• NSA, DHS Issue Guidance on Protective DNS
• Report: Russian Hackers Exploit Lithuanian Infrastructure
• Supermicro, Pulse Secure Respond to Trickbot's Ability to Target Firmware
• Three New Malware Strains Linked to SolarWinds Hackers
• South Africa Opposes WhatsApp-Facebook Data Sharing

thehackernews.com

• Bug in Apple's Find My Feature Could've Exposed Users' Location Histories
• Google Cloud Certifications — Get Prep Courses and Practice Tests at 95% Discount
• Mazafaka — Elite Hacking and Cybercrime Forum — Got Hacked!
• Researchers Find 3 New Malware Strains Used by SolarWinds Hackers
• Google Will Use 'FLoC' for Ad Targeting Once 3rd-Party Cookies Are Dead
• Extortion Gang Breaches Cybersecurity Firm Qualys Using Accellion Exploit
• CISA Issues Emergency Directive on In-the-Wild Microsoft Exchange Flaws
• Hackers Now Hiding ObliqueRAT Payload in Images to Evade Detection
• Replacing EDR/NGAV with Autonomous XDR Makes a Big Difference for Small Security Teams
• A $50,000 Bug Could've Allowed Hackers Access Any Microsoft Account
• URGENT — 4 Actively Exploited 0-Day Flaws Found in Microsoft Exchange
• New Chrome 0-day Bug Under Active Attacks – Update Your Browser ASAP!

threatpost.com

• U.S. DoD Weapons Programs Lack ‘Key’ Cybersecurity Measures
• WordPress Injection Anchors Widespread Malware Campaign
• Massive Supply-Chain Cyberattack Breaches Several Airlines
• Critics Blast Google’s Aim to Replace Browser Cookie with ‘FLoC’
• D-Link, IoT Devices Under Attack By Tor-Based Gafgyt Variant
• Microsoft, FireEye Unmask More Malware Linked to SolarWinds Attackers
• Cyberattackers Target Top Russian Cybercrime Forums
• National Surveillance Camera Rollout Roils Privacy Activists
• CISA Orders Federal Agencies to Patch Exchange Servers
• COVID-19 Vaccine Spear-Phishing Attacks Jump 26 Percent

tripwire.com-state-of-security

• The Humanity and Evolution of Cyber
• Wall Street targeted by new Capital Call investment email scammers
• PCI DSS 4.0 Is Coming – Are You Ready?
• MalwareTech, WannaCry and Kronos – Understanding the Connections
• Tripwire Patch Priority Index for February 2021
• The Security Wisdom of the All-Knowing CISO
• Cybersecurity Challenges: Understanding the What, How and When of Change
• Cloud-Based Storage Misconfigurations – Understanding the Security Risks and Responses
• Fixing the “Human Error” Problem
• ENISA Releases Guidelines for Cloud Security for Healthcare Services
• 10 Database Security Best Practices You Should Know
• Black History Month: Diversity in Cybersecurity Is More Important than Technology

Toto je souhrn titulků zpravodajských zdrojů, generovaný z jejich RSS/atom kanálů. Zdroje řazeny abecedně.
©opyright a zodpovědnost za obsah nesou autoři jednotlivých zdrojů.
Generováno Mon, 08 Mar 2021 06:24:04 +0100
poznámky a připomínky: klokanek (zavinovačka) eldar (bodka) cz