Security Stuff

By KM

Information Security, Cyber Security and General Security Related Stuff

U.S. Dept. of Energy
Choosing the Right Strategies for Endpoint Security
darkreading.com - TechWeb
Gal Shpantzer Independent Security Professional Gal Shpantzer has over 15 years of experience as an independent security professional and is a trusted …
Information Security
773 Million Email Addresses, 21 Million Passwords For Sale on Hacker Forum
darkreading.com
Data appears to be from multiple breaches over past few years, says researcher who discovered it. A folder with over 12,000 files containing nearly …
773M Password ‘Megabreach’ is Years Old — Krebs on Security
krebsonsecurity.com
My inbox and Twitter messages positively lit up today with people forwarding stories from Wired and other publications about a supposedly new trove of …
Bring Order to Chaos By Building SIEM Use Cases, Standards, Baselining and Naming Conventions
securityintelligence.com
Security operations centers (SOCs) are struggling to create automated detection and response capabilities. While custom security information and …
Open Banking
Board Directors Can't Afford to Ignore Cybersecurity Risk
securityintelligence.com
As organizations rush to adopt new digital channels, big data, advanced analytics, and emerging technologies such as blockchain, artificial …
Information Security
Nearly 800M Email Addresses Exposed in "Collection #1" Data Breach
tripwire.com - David Bisson Follow @DMBisson Jan 17, 2019 Latest Security News
In his analysis of the “collection of 2000+ dehashed databases and Combos stored by topic” contained in the root folder, Hunt found 2,692,818,238 …
Airlines
Airline Booking System Exposed Passenger Details
databreachtoday.com
Vulnerability Highlights Poor Security Controls for Passenger Name Records Jeremy Kirk (jeremy_kirk) January 17, 2019 An investigation is underway …
Online Privacy
Apple CEO Demands Federal Data Privacy Legislation
threatpost.com
Apple CEO Tim Cook is adding his voice to the wave of tech giants, privacy watchdogs, and consumers calling for the government to roll out tightened …
Cyber-Jackpot: 773M Credentials Dumped on the Dark Web
threatpost.com
A database of breached emails totaling 773 million unique addresses has turned up on a popular underground hacking forum, giving cybercriminals one …
Cryptomining Malware Uninstalls Cloud Security Products
threatpost.com
Researchers say they have discovered a unique malware family capable of gaining admin rights on targeted systems by uninstalling cloud-security …
Drupal
Two Code Execution Flaws Patched in Drupal
securityweek.com
Updates released on Wednesday for Drupal 7, 8.5 and 8.6 address two potentially serious vulnerabilities that can be exploited for arbitrary code …
World Economic Forum
Pessimism Pervades World Economic Forum Annual Survey
securityweek.com
The annual World Economic Forum (WEF) Global Risks Perception Survey this year again includes two cybersecurity risks in the top five perceived …
British Airways
Flaw in Reservation System Impacts Many Airlines
securityweek.com
A vulnerability discovered in a reservation system used by hundreds of airlines around the world could expose the details of millions of their …
Cross Site Scripting
Serious Flaws Found in ControlByWeb Industrial Weather Station
securityweek.com
Researchers have discovered two potentially serious vulnerabilities in an industrial-grade weather station made by ControlByWeb, a company that …
Ivory Coast
Ongoing Attacks Hit West African Financial Institutions Since Mid-2017
securityweek.com
Cyber-attacks that have been ongoing since at least mid-2017 hit financial institutions in West Africa, Symantec security researchers report. The …
Business Technology
Breach of nearly 2.7 billion records underlines password flaws
computerweekly.com
Security Editor A leak of 87GB of 772.9 million emails, 21.2 million passwords and 1.1 billion unique combinations of email addresses and passwords, …
Cybersecurity
Mother of All Breaches Exposes 773 Million Emails, 21 Million Passwords
Gizmodo - Victoria Song
There’s no shortage of data breaches these days, but this one should make you sit up and pay attention. The newly discovered “Collection #1" is the …
U.S. Politics
Millions of files from the Oklahoma government, including details of FBI investigations, were left exposed in a massive breach
Business Insider - Paige Leskin
Millions of files pertaining to sensitive FBI investigations were left exposed on an unprotected internet server, cybersecurity researchers say. The data breach stems from an Oklahoma state-level agency,
MS Office
Go Hands-On with New Security Tricks at Black Hat Asia
darkreading.com - Black Hat Staff
Get up close and personal with the latest tools and techniques for testing (and breaking) everything from HTTPS to deep neural networks to Microsoft …
Information Security
The Security Perimeter Is Dead; Long Live the New Endpoint Perimeter
darkreading.com
The network no longer provides an air gap against external threats, but access devices can take up the slack. Four potent forces have turned network …
CEOs
U.S. CEOs Are More Worried About Cybersecurity Than a Possible Recession
Fortune - Erik Sherman
With markets uncertain, many onlookers might think a recession is on the way, whether that’s most CFOs in the world or voters in the United …
The best security conferences of 2019
techbeacon.com
You can find a security conference tailored to every IT security pro's needs, covering application security, information security and data security. …
Mobile
Chief Information Security Officer Priorities For 2019
Forbes - Alan Zeichick
Keep your customer data safe and your company’s name out of the newspapers, that’s a good first goal. Keep your confidential data out of the hands of competitors or foreign adversaries, that’s also important.
Internet of Things
Security in an IoT World: Your Big Data Problem is Getting Bigger
securityweek.com
It’s that time of year for prediction articles and the number has become almost overwhelming. This year, one of the trending topics I’ve noticed is …
Business Technology
Security Think Tank: Cloud tech helps to protect advanced networks
computerweekly.com
In today’s technology environment, we have come a long way from the “old days” of IT. Today, IT consumers expect “always on” networks anywhere they …
Accenture
Cybercrime Could Cost Companies US$5.2 Trillion Over Next Five Years, According to New Research from Accenture
Associated Press
NEW YORK--(BUSINESS WIRE)--Jan 17, 2019--Companies globally could incur US$5.2 trillion in additional costs and lost revenue over the next five years due to cyberattacks, as dependency on complex internet-enabled
Gear & Gadgets
How to digitally secure your smart home
Popular Science - By David Nield
Protect your internet-connected devices. Every new tech category creates a new avenue for hackers to exploit. The smart home is no exception. Internet-connected speakers, lights, and thermostats make much
Information Security
Simulating Lateral Attacks Through Email
darkreading.com
A skilled attacker can get inside your company by abusing common email applications. Here are three strategies to block them. A big portion of …
Apps
Largest collection ever of breached data found
The Guardian - Alex Hern
The largest collection of breached data in history has been discovered, comprising more than 770m email addresses and passwords posted to a popular hacking forum in mid-December. The 87GB data dump was