Krebs on Security

DECEMBER 10, 2019

By nearly all accounts, the chief bugaboo this month is CVE-2019-1458 , a vulnerability in a core Windows component (Win32k) that is present in Windows 7 through 10 and Windows Server 2008-2019. ’ An odd discrepancy on top of a CVE advisory for an outdated OS. It is very likely this is being exploited in the wild.”

Libraries 146

Libraries Encryption Security Ransomware 146

Weissman's World

JANUARY 3, 2019

It’s 2019, and Steve Weissman anticipates and addresses a number of key themes for the new year: 0:44 – Metadata and database fields: ‘labels’ as the keys to … everything! The post Perspective Check – Anticipation 2019 appeared first on Holly Group. 4:08 […].

Metadata 166

Metadata Marketing Records Management Blockchain 166

Data Breach Today

JUNE 9, 2020

Increasing Use of Open Source Software Creates More Opportunities for Flaws The number of reported vulnerabilities found in open source software more than doubled in 2019 to almost 1,000, with projects such as Magento, GitLab, and Jenkins posting the largest increases, according to security firm RiskSense.

Security 202

Security 202

Data Breach Today

APRIL 5, 2019

A Guide to Video Interviews With Thought Leaders at This Year's Event At RSA Conference 2019 in San Francisco, Information Security Media Group's editorial team conducted more than 100 video interviews with industry thought leaders. Here are the highlights.

Information Security 220

Information Security Security 220

Data Breach Today

APRIL 17, 2019

Facebook's Cryptocurrency Folly, Scaling Security and Why Doomsday Is Temporary From blockchains and surveillance to backdoors and GDPR, a group of leading cryptographers rounded up the top cybersecurity and privacy matters of the day at the cryptographers' panel held at the recent RSA Conference 2019 in San Francisco.

Blockchain 249

Blockchain GDPR Privacy Cybersecurity 249

Data Breach Today

MARCH 14, 2019

Carbon Black's Tom Kellermann on Latest Threats to Banks Carbon Black and Optiv have released their 2019 Modern Bank Heists report, which unveils the latest cyber threats to global banking institutions. Report co-author Tom Kellermann discusses the findings and what they mean.

190

190

Krebs on Security

MARCH 12, 2019

One interesting patch from Microsoft this week comes in response to a zero-day vulnerability ( CVE-2019-0797 ) reported by researchers at Kaspersky Lab, who discovered the bug could be (and is being) exploited to install malicious software.

Security 164

Security Access IT 164

Krebs on Security

APRIL 9, 2019

According to security firm Rapid 7 , two of the vulnerabilities — CVE-2019-0803 and CVE-2019-0859 — are already being exploited in the wild. These patches apply to Windows , Internet Explorer (IE) and Edge browsers, Office, Sharepoint and Exchange.

Security 185

Security IT Access 185

Krebs on Security

AUGUST 13, 2019

“According to Microsoft, at least two of these vulnerabilities ( CVE-2019-1181 and CVE-2019-1182 ) can be considered ‘wormable’ and [can be equated] to BlueKeep,” referring to a dangerous bug patched earlier this year that Microsoft warned could be used to spread another WannaCry-like ransomware outbreak.

Authentication 174

Authentication Ransomware IT Security 174

Data Breach Today

DECEMBER 22, 2018

A Summary of the Best Predictions for Next Year What's ahead for the cybersecurity landscape in 2019? We've received many lists of predictions from vendors and analysts for next year, and we've picked out five of the most interesting ones.

Cybersecurity 229

Cybersecurity 229

Data Breach Today

JANUARY 3, 2019

Joram Borenstein, general manager of Microsoft's Cybersecurity Solutions Group, discusses his top three concerns for 2019. With an operating system that's used by 90 percent of Fortune 500 companies, Microsoft closely monitors cyberattack trends.

Cybersecurity 200

Cybersecurity 200

Krebs on Security

JANUARY 9, 2019

All things considered, this first Patch Tuesday of 2019 is fairly mild, bereft as it is of any new Adobe Flash updates or zero-day exploits. Among the more eyebrow-raising flaws fixed this week is CVE-2019-0547 , a weakness in the Windows component responsible for assigning Internet addresses to host computers (a.k.a.

Security 155

Security IT 155

Data Breach Today

APRIL 1, 2019

Cybersecurity 'Things Can Only Get Better' as Conference Marks Its 28th Year Keynotes and briefings at the recent 28th annual RSA Conference 2019 covered a wide range of topics, including privacy, hackers, cyber extortion, machine learning, artificial intelligence, human psychology, legal matters, career advice and internet-connected device concerns. (..)

Artificial Intelligence 160

Artificial Intelligence Privacy Cybersecurity IT 160

Data Breach Today

DECEMBER 28, 2018

Leading the latest edition of the ISMG Security Report: Microsoft's Joram Borenstein highlights his top three areas of focus for 2019. Plus, Randy Vanderhoof of the US Payments Forum on securing card transactions in the coming year.

Cybersecurity 189

Cybersecurity Security 189

Security Affairs

JANUARY 18, 2020

According to the IC3 Annual Report released in April 2019 financial losses reached $2.7 The total cost of cybercrime for each company in 2019 reached US$13M. According to the 2019 Data Breach Investigations Report , 43% of all nefarious online activities impacted small businesses. Financial losses reached $2.7 billion in 2018.

Data breaches 132

Data breaches IoT Cybersecurity Ransomware 132

Krebs on Security

SEPTEMBER 10, 2019

Two of the bugs quashed in this month’s patch batch ( CVE-2019-1214 and CVE-2019-1215 ) involve vulnerabilities in all supported versions of Windows that have already been exploited in the wild.

Security 140

Security IT Access 140

Hunton Privacy

MAY 20, 2020

On May 18, 2020, the European Data Protection Board (“EDPB”) released its Annual Report (the “Report”) providing details of the EDPB’s work in 2019. The EDPB adopted five new guidelines in 2019, providing clarification on the law.

Artificial Intelligence 128

Artificial Intelligence GDPR Personal data Blockchain 128

Data Breach Today

JANUARY 8, 2019

Attorney David Holtzman Highlights Three Issues to Track What are the top regulatory trends to look for in the healthcare sector in 2019? Privacy attorney David Holtzman pinpoints three key issues to watch.

Data Privacy 155

Data Privacy Privacy 155

Security Affairs

FEBRUARY 18, 2020

Having said that I found Income Tax Department India and MIT Sloan was also vulnerable to CVE-2019-0604 a remote code execution vulnerability which exists in Microsoft SharePoint. Aside, MIT Sloan School of Management was also found to be vulnerable with CVE-2019-0604. SecurityAffairs – hacking, CVE-2019-0604).

Government 128

Government Security IT Information Security 128

Security Affairs

FEBRUARY 12, 2020

The FBI’s Internal Crime Complaint Center (IC3) released the FBI 2019 Internet Crime Report , a document that outlines cybercrime trends over the past year. Here we are to analyze the annual FBI 2019 Internet Crime Complaint Center (IC3) , one of the most interesting documents on the crime trends observed in the last 12 months.

Phishing 121

Phishing Ransomware IT Security 121

Security Affairs

MARCH 7, 2020

A new vulnerability, tracked as CVE-2019-0090 , affects all Intel chips that could allow attackers to bypass every hardware-enabled security technology. Security experts from Positive Technologies warn of a new vulnerability, tracked as CVE-2019-0090, that affects all Intel processors that were released in the past 5 years.

Authentication 140

Authentication Encryption Security Access 140

Hunton Privacy

JULY 8, 2020

On July 1, 2020, the Dutch Data Protection Authority ( Autoriteit Persoonsgegevens , the “Dutch DPA”) published its 2019 annual report (the “Report”). The Report shows that in 2019, the Dutch DPA focused on enforcement actions, after having raised awareness about the EU General Data Protection Regulation (the “GDPR”) in 2018.

Personal data 96

Personal data Data breaches Sales GDPR 96

Adam Levin

FEBRUARY 25, 2020

The number of stalkerware apps detected on smartphones increased in 2019, a full 60% over the previous year according to a new report released by Kaspersky Labs. . This is thought to be the way Amazon founder and CEO Jeff Bezos was hacked in 2019. The post Stalkerware Installations Up 60% in 2019 appeared first on Adam Levin.

Phishing 94

Phishing Authentication Privacy Communications 94

Dark Reading

DECEMBER 9, 2020

After lagging 2019 numbers in the first quarter, vulnerabilities have surged in the rest of 2020, leading researchers to predict that final numbers for this year will meet or exceed those of last year, report says.

89

89

Security Affairs

MARCH 23, 2019

Pwn2Own 2019 Day 3 – Experts earned $35,000 and a Tesla Model 3 after hacking the vehicle’s web browser. Pwn2Own 2019 Day 3 – Hackers focused their efforts on car hacking, two teams participated in the competitions but only one of them reached the goal. SecurityAffairs – Pwn2Own 2019, hacking). Pierluigi Paganini.

Security 111

Security 111

Security Affairs

MAY 28, 2020

National Security Agency (NSA) is warning that Russia-linked APT group tracked Sandworm Team has been exploiting a critical vulnerability (CVE-2019-10149) in the Exim mail transfer agent (MTA) software since at least August 2019. The CVE-2019-10149 flaw, aka “The Return of the WIZard,” affects versions 4.87

Systems administration 110

Systems administration Military Access Security 110

Security Affairs

APRIL 1, 2019

The company also fixed the security flaws disclosed at the Pwn2Own 2019 hacking competition. VMware released updates to address vulnerabilities in vCloud Director, ESXi, Workstation and Fusion products, including ones disclosed at the Pwn2Own 2019. x running on macOS (CVE-2019-5514). Universal Host Controller Interface (UHCI).

Access 91

Access Security IT 91

OpenText Information Management

JULY 12, 2019

Enterprise World 2019 wraps up big time, with record attendance and major announcements Attendees of OpenText™ Enterprise World 2019’s closing keynote were buzzing with anticipation as the conference entered its final day in Toronto, and Mark Barrenechea, OpenText CEO and CTO, kept the excitement high, announcing that this was a “record” with more (..)

IT 79

IT Cloud 79

Security Affairs

APRIL 3, 2021

More clients of Capital One have been impacted in the 2019 data breach, the US bank is notifying them of their SSNs exposure. US bank Capital One notified a number of additional customers that their Social Security numbers were exposed in the data breach that took place in July 2019. District Court in Seattle. Pierluigi Paganini.

Data breaches 82

Data breaches Access Security IT 82

Info Source

FEBRUARY 12, 2020

2019 was a busy year for DocuWare. This focus apparently paid off, as for 2019, DocuWare recently reported 17% YOY growth to reach approximately $60 million in annual revenue. We added nearly 2,000 customers in 2019 and 1,200 of them were cloud customers,” said Roberts. the Americas-based arm of the company.

ECM 78

ECM Cloud Sales Marketing 78

Security Affairs

FEBRUARY 11, 2020

According to IBM, OT attacks increased by over 2000 percent in 2019, most of them involved the Echobot IoT malware. IBM’s 2020 X-Force Threat Intelligence Index report analyzes the threat landscape in 2019, the experts observed a spike in the number of OT attacks. “ OT attacks hit an all-time high. ” continues the report.

IoT 105

IoT Passwords Risk IT 105

Security Affairs

DECEMBER 23, 2019

Critical CVE-2019-19781 flaw in Citrix NetScaler ADC and Citrix NetScaler Gateway could be exploited to access company networks, 80,000 companies at risk worldwide. The CVE-2019-19781 vulnerability was discovered by Mikhail Klyuchnikov from Positive Technologies. SecurityAffairs – Citrix, CVE-2019-19781). Pierluigi Paganini.

Risk 98

Risk e-Delivery Access Information Security 98

Security Affairs

APRIL 2, 2019

The privilege escalation vulnerability ( CVE-2019-0211 ) affecting the Apache HTTP server could be exploited by users with the right to write and run scripts to gain root on Unix systems. — Mark J Cox (@iamamoose) April 2, 2019. The second one, tracked as CVE-2019-0215 , affects Apache 2.4.37 releases 2.4.17 and 2.4.38.

Access 110

Access Authentication Risk Security 110

IT Governance

MARCH 9, 2020

Throughout 2019, we kept an eye on cyber attack and data breach reported in mainstream publications, releasing our findings in our monthly blog series. . With 2019 in the books, we’ve summarised these and other facts in an infographic. . Or that the leading cause of data breaches was internal error? .

Data breaches 88

Data breaches Government Security IT 88

Security Affairs

MAY 20, 2019

Experts discovered a privilege escalation vulnerability in the Linux Kernel, tracked as CVE-2019-11815, that affects the implementation of RDS over TCP. The vulnerability tracked as CVE-2019-11815 could lead to privilege escalation, it received a CVSS base score of 8.1. . SecurityAffairs – Linux, CVE-2019-11815).

Cleanup 111

Cleanup Cybersecurity Security Access 111

Threatpost

DECEMBER 30, 2019

Cybercrime increasingly went mobile in 2019, with everything from Apple iPhone jailbreaks and rogue Android apps to 5G and mobile-first phishing dominating the news coverage. Here are Threatpost's Top 10 mobile security stories of 2019.

Security 63

Security Phishing IoT Privacy 63