well... news

csirt.cz

• Postřehy z bezpečnosti: světlá strana Síly vrací úder
• Postřehy z bezpečnosti: neopravitelná zranitelnost v procesoru Apple M1
• Postřehy z bezpečnosti: úskalí Wi-Fi a útoky na nic netušící uživatele
• Postřehy z bezpečnosti: útoky na strojové učení
• Pozor na podvodná volání nabízející pomoc po údajném útoku hackera
• Postřehy z bezpečnosti: chyby v implementacích DNS nazvané NAME:WRECK
• Postřehy z bezpečnosti: botnet s vlastním honeypotem
• Postřehy z bezpečnosti: sofistikovaný útok na servery MS Exchange
• Zranitelnost nástroje VMware View Planner
• Postřehy z bezpečnosti: Bitcoin na falešných investičních webech

darkreading.com

• 7 Powerful Cybersecurity Skills the Energy Sector Needs Most
• Does Your Cyberattack Plan Include a Crisis Communications Strategy? 5 Tips to Get Started
• Did Companies Fail to Disclose Being Affected by SolarWinds Breach?
• Software-Container Supply Chain Sees Spike in Attacks
• Data Leaked in Fertility Clinic Ransomware Attack
• Baltimore County Public Schools' Ransomware Recovery Tops $8M
• Fintech at SaaS Speed
• Are Ransomware Attacks the New Pandemic?
• Attackers Find New Way to Exploit Google Docs for Phishing
• This Week in Database Leaks: Cognyte, CVS, Wegmans
• Accidental Insider Leaks Prove Major Source of Risk
• 11 Security Certifications to Seek Out This Summer

krebsonsecurity.com

• How Cyber Safe is Your Drinking Water Supply?
• First American Financial Pays Farcical $500K Fine
• Ukrainian Police Nab Six Tied to CLOP Ransomware
• How Does One Get Hired by a Top Cybercrime Gang?
• Microsoft Patches Six Zero-Day Security Holes
• Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang
• Adventures in Contacting the Russian FSB
• Using Fake Reviews to Find Dangerous Extensions
• Boss of ATM Skimming Syndicate Arrested in Mexico
• How to Tell a Job Offer from an ID Theft Trap

nakedsecurity.sophos.com

• Ransomware: What REALLY happens if you pay the crooks?
• Can *YOU* blow a PC speaker using only a Linux kernel driver?
• S3 Ep37: Quantum crypto, refunding Bitcoins, and Alpaca problems [Podcast]
• How to hack a bicycle – Peloton Bike+ rooting bug patched
• Clop ransomware suspects busted in Ukraine, money and motors seized
• “Face of Anonymous” suspect deported from Mexico to face US hacking charges
• ALPACA – the wacky TLS security vulnerability with a funky name
• S3 Ep36: Trickbot coder busted, passwords cracked, and breaches judged [Podcast]
• Chrome zero-day, hot on the heels of Microsoft’s IE zero-day. Patch now!
• How could the FBI recover BTC from Colonial’s ransomware payment?

nukib.cz

• Agentura EUSPA spouští konzultační kampaň s komerčními subjekty zaměřenou na službu PRS
• Upozornění na další vlnu vyděračské kampaně
• Ukončení činnosti ransomwaru Avaddon
• Podpis Rámcové smlouvy o spolupráci Národního úřadu pro kybernetickou a informační bezpečnost a Univerzity obrany
• Dosud největší cvičení ČEPS a NÚKIB prověřilo, jak by energetici zvládli kyberútok
• Hejtmani se chtějí víc věnovat kybernetické bezpečnosti v krajích. Zejména u nemocnic
• Upozornění na kritickou zranitelnost v produktu VMware vCenter
• Upozornění na probíhající kampaň ransomwaru Avaddon
• Upozornění na zranitelnost Windows HTTP Protocol Stack
• Upozornění na zranitelnost v systémovém ovladači od výrobců Dell a Alienware
• Základní bezpečnostní opatření pro vrcholové vedení
• Doporučení k používání protokolu TLP ke sdílení chráněných informací

scmagazine.com

• Tool lets users supplement Mitre ATT&CK knowledge base with their own threat intel
• Complex supply chain logistics are leaving defense contractors vulnerable
• 50% of misconfigured containers hit by botnets in under an hour
• Would companies even abide by a ransomware payments ban?
• Millions of medical images, patient data remain exposed via PACS flaws
• Info-sharing pact will help electric companies comply with DOE’s 100-day plan
• Lies my vendor told me: sorting through the deceptions and misconceptions in SIEM
• Wegmans reports misconfigurations on two cloud databases
• How to block WFH employees from downloading pirated software
• Alina Lodge notifies patients of data breach tied to 2020 Blackbaud incident

securityaffairs.co

• DirtyMoe botnet infected 100,000+ Windows systems in H1 2021
• Tor Browser 10.0.18 fixes a bug that allows to track users by fingerprinting installed apps
• DroidMorph tool generates Android Malware Clones that
• Ragnar Locker ransomware leaked data stolen from ADATA chipmaker
• Threat actors in January attempted to poison the water at a US facility
• NSA releases guidance for securing Unified Communications and VVoIP
• MI5 seized Boris Johnson’s phone over security risk fears
• Poland: The leader of the PiS party blames Russia for the recent attack
• Norway blames China-linked APT31 for 2018 government hack
• This bug can permanently break iPhone WiFi connectivity

securityweek.com

• SASE Firm Cato Networks Revamps Managed Detection and Response Solution
• Most Developers Never Update Third-Party Libraries in Their Software: Report
• Passwordless Authentication Firm Transmit Security Raises $543 Million
• EU Data Watchdogs Want Ban on AI Facial Recognition
• SentinelOne Seeks to Raise Up to $928 Million in IPO
• Research Shows Many Security Products Fail to Detect Android Malware Variants
• Researcher Claims Apple Downplayed Severity of iCloud Account Takeover Vulnerability
• Ransomware Gangs Get Paid Off as Officials Struggle for Fix
• Attacks Against Container Infrastructures Increasing, Including Supply Chain Attacks
• Cybersecurity M&A Roundup for June 14-20, 2021
• Vermont Hospital Still Calculating Cost of Ransomware Attack
• South Korean Atomic Energy Research Institute Confirms Cyberattack

thehackernews.com

• Wormable DarkRadiation Ransomware Targets Linux and Docker Instances
• NVIDIA Jetson Chipsets Found Vulnerable to High-severity Flaws
• 5 Critical Steps to Recover From a Ransomware Attack
• DroidMorph Shows Popular Android Antivirus Fail to Detect Cloned Malicious Apps
• Beware! Connecting to This Wireless Network Can Break Your iPhone's Wi-Fi Feature
• North Korea Exploited VPN Flaw to Hack South's Nuclear Research Institute
• Cyber espionage by Chinese hackers in neighbouring nations is on the rise
• Russia bans VyprVPN, Opera VPN services for not complying with blacklist request
• Google Releases New Framework to Prevent Software Supply Chain Attacks
• [eBook] 7 Signs You Might Need a New Detection and Response Tool
• Update‌ ‌Your Chrome Browser to Patch Yet Another 0-Day Exploit‌ed ‌in‌-the‌-Wild
• Molerats Hackers Return With New Attacks Targeting Middle Eastern Governments

threatpost.com

• Six Flags to Pay $36M Over Collection of Fingerprints
• Wegmans Exposes Customer Data in Misconfigured Databases
• Bugs in NVIDIA’s Jetson Chipset Opens Door to DoS Attacks, Data Theft
• Embryology Data Breach Follows Fertility Clinic Ransomware Hit
• Agent Tesla RAT Returns in COVID-19 Vax Phish
• iPhone Wi-Fi Crushed by Weird Network
• What’s Making Your Company a Ransomware Sitting Duck
• Carnival Cruise Cyber-Torpedoed by Cyberattack
• Insider Versus Outsider: Navigating Top Data Loss Threats
• ‘Oddball’ Malware Blocks Access to Pirated Software

tripwire.com-state-of-security

• The Top 5 Vendor-Neutral Cloud Security Certifications of 2021
• Voice-Activated Device Privacy: What You Need to Know
• The Evolution of Securing Critical Infrastructure
• Survey: Nearly Half of Manufacturers Suffered a Digital Attack in the Last Year
• Protecting the New Most Vulnerable Population – Subscription Scams
• CLOP ransomware suspects charged by police in Ukraine
• What Is a Security Operations Center (SOC)?
• What’s New in v8 of the CIS Controls
• Ransomware is the biggest threat, says GCHQ cybersecurity chief
• Why a CISO Needs To Speak The Language Of Business
• Protecting the New Most Vulnerable Population – The Grandparent Scam
• A Look at a Zero Trust Strategy for the Remote Workforce

Toto je souhrn titulků zpravodajských zdrojů, generovaný z jejich RSS/atom kanálů. Zdroje řazeny abecedně.
©opyright a zodpovědnost za obsah nesou autoři jednotlivých zdrojů.
Generováno Tue, 22 Jun 2021 18:12:02 +0200
poznámky a připomínky: klokanek (zavinovačka) eldar (bodka) cz