Krebs on Security

FEBRUARY 20, 2024

Instead of listing data stolen from ransomware victims who didn’t pay, LockBit’s victim shaming website now offers free recovery tools, as well as news about arrests and criminal charges involving LockBit affiliates. This prompted several XSS members to start posting memes taunting the group about the security failure.

Ransomware 259

Ransomware Encryption Insurance Manufacturing 259

Data Breach Today

DECEMBER 19, 2023

Okta Says Acquisition Will Expand Its Ability to Detect High-Risk Accounts Okta finalized an agreement to acquire Spera Security, saying the purchase will expand its ability to track risky accounts and access misconfigurations.

Security 289

Security Risk Access IT 289

Data Breach Today

JUNE 17, 2020

Senator Wyden Releases CIA's Own 2017 Report Into Leak of 'Vault 7' Hacking Tools An internal CIA report from 2017 - just released in heavily redacted form - found that the agency's failure to secure its own systems facilitated the massive "Vault 7" data breach that enabled classified information, including details of 35 CIA hacking tools, to be leaked (..)

IT 257

IT Security Data breaches 257

Data Breach Today

MARCH 18, 2024

Data Security Vendor Retains Unicorn Status With Riverwood Capital-Led Growth Round A data security firm led by a former CA Technologies executive raised $60 million to boost both organic and inorganic expansion around data and compliance.

Compliance 267

Compliance Security Access IT 267

Security Affairs

APRIL 22, 2024

Russia-linked APT28 group used a previously unknown tool, dubbed GooseEgg, to exploit Windows Print Spooler service flaw. Microsoft reported that the Russia-linked APT28 group (aka “ Forest Blizzard ”, “ Fancybear ” or “ Strontium ” used a previously unknown tool, dubbed GooseEgg, to exploit the Windows Print Spooler flaw CVE-2022-38028.

Military 123

Military File names Education Phishing 123

eSecurity Planet

OCTOBER 18, 2021

But that success and the openness inherent in the community have led to a major challenge – security. Therefore, any security vulnerabilities are disclosed publicly. This has given rise to a large number of open source security tools. However, the tools themselves vary considerably in scope, sophistication, and function.

Security 132

Security Encryption Compliance Libraries 132

Security Affairs

APRIL 25, 2024

Cybersecurity and Infrastructure Security Agency (CISA) added the CVE-2022-38028 Microsoft Windows Print Spooler Privilege Escalation vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. This tool modifies a JavaScript constraints file and executes it with SYSTEM-level permissions.

IT 127

IT Education Cybersecurity Risk 127

The Last Watchdog

JANUARY 12, 2024

12, 2024 – Trimarc Security , the professional services company with extensive expertise in securing Active Directory for enterprise organizations, today announced the early access availability of its new product, Trimarc Vision. What is the current security posture of ALL of my AD forests? Washington, DC, Jan.

Security 100

Security Risk Cloud Access 100

Dark Reading

NOVEMBER 13, 2023

We need to treat security as a process issue, not try to solve it with a collection of tools. Process failures are the root cause of most serious cybersecurity incidents.

Security 90

Security Cybersecurity IT 90

eSecurity Planet

AUGUST 26, 2021

In fact, there are more than a few flaws present, as well as the occasional gaping security hole. Code debugging and code security tools exist to find and help developers fix the problems that occur. Such tools typically capture exceptions as they occur and provide diagnostic and contextual data to make resolution easier.

Security 142

Security Libraries IT Cloud 142

eSecurity Planet

APRIL 28, 2023

Automated patch management can help prevent security breaches by automatically identifying, downloading, testing, and delivering software and firmware updates to devices and applications through the use of specialized software tools. Software updates are critical for keeping a system’s integrity and security intact.

IT 89

IT Compliance Risk Security 89

The Last Watchdog

FEBRUARY 11, 2024

Related: The case for augmented reality training Because of this, cybersecurity investments and regulatory oversight are increasing at an astounding rate , especially for those in the financial services industry, bringing an overwhelming feeling to chief compliance officers without dedicated security teams. The list goes on.

Risk 200

Risk IT Financial Services Cybersecurity 200

Security Affairs

SEPTEMBER 28, 2022

nuvola is the new open-source cloud security tool to address the privilege escalation in cloud environments. nuvola is the new open source security tool made by the Italian cyber security researcher Edoardo Rosa ( @_notdodo_ ), Security Engineer at Prima Assicurazioni. Cloud Security Context.

Cloud 102

Cloud Security Metadata Data breaches 102

Data Breach Today

JUNE 19, 2023

BatCloak Slips Batch Files Past AV and EDR Detection Malware developers are adopting an easy-to-use obfuscation tool that slips malware past antivirus, warn security researchers. BatCloak requires minimal programming skills to use. Among its recent successes is a recent remote access Trojan dubbed SeroXen.

Access 154

Access Security IT 154

eSecurity Planet

MAY 19, 2023

Application security tools and software solutions are designed to identify and mitigate vulnerabilities and threats in software applications. These tools play a vital role in ensuring the security, integrity, and confidentiality of sensitive information, such as personal data and financial records.

Security 90

Security Cloud Compliance Risk 90

Security Affairs

MARCH 30, 2024

Red Hat warns of a backdoor in XZ Utils data compression tools and libraries in Fedora development and experimental versions. Red Hat urges users to immediately stop using systems running Fedora development and experimental versions because of a backdoor in the latest versions of the “xz” tools and libraries. rpm and xz-libs-5.6.0-2.fc40.x86_64.rpm

Libraries 129

Libraries Authentication Access Risk 129

Security Affairs

MARCH 8, 2024

Cisco addressed two high-severity vulnerabilities in Secure Client that could lead to code execution and unauthorized remote access VPN sessions. Cisco released security patches to address two high-severity vulnerabilities in Secure Client respectively tracked as CVE-2024-20337 and CVE-2024-20338.

Security 104

Security IT Authentication Libraries 104

Data Breach Today

JANUARY 20, 2021

FireEye Also Describes Hackers' Tools and Techniques Security firm FireEye has released a free auditing and remediation tool on GitHub that it says can help organizations determine if the hacking group that targeted SolarWinds used similar techniques within their network to gain access to Microsoft Office 365 accounts.

Access 260

Access Security IT 260

Security Affairs

OCTOBER 12, 2023

Cybernews presented Ransomlooker , a tool to monitor ransomware groups’ extortion sites and delivers consolidated feeds of their claims worldwide. The researchers have created the tool to help cybersecurity experts in their daily jobs by providing real-time updates and actionable insights. ” reads the announcement.

Ransomware 136

Ransomware Personal data Access Cybersecurity 136

Data Breach Today

JUNE 16, 2020

Senator Wyden Releases 2017 Report That Blames Lack of Security for Leaks An internal CIA report released Tuesday found that the agency's failure to secure its own systems led to the massive 2017 data breach that enabled classified information, including details on 35 CIA hacking tools, to be leaked to WikiLeaks.

IT 208

IT Security Data breaches 208

Data Breach Today

JULY 24, 2023

Webhelp CISO on Interactive Tools for Cybersecurity Awareness Training In a bid to revolutionize information security training and make it more engaging and memorable for employees, Ivan Milenkovic, group CISO at WebHelp, advises firms to adopt gamification and interactive content in corporate training to make it more accessible and memorable for employees. (..)

Security 245

Security Information Security Cybersecurity Access 245

Data Breach Today

DECEMBER 8, 2020

Security Vendor Believes No Customer Data Was Exfiltrated FireEye, one of the world's top cybersecurity firms, says in a striking announcement on Tuesday that attackers stole its penetration testing tools and sought information about its government clients. However, FireEye doesn't believe the attackers exfiltrated data.

Cybersecurity 271

Cybersecurity Government Security IT 271

Data Breach Today

APRIL 29, 2021

Complain Alleges 'Exposure Notification System' Allows Third-Party Access to Personal Info A lawsuit alleges that a security flaw in a Google COVID-19 contact tracing tool is exposing personal and medical information of millions of users to third parties through device system logs.

Access 271

Access Security IT 271

The Last Watchdog

MARCH 29, 2022

Log4j is the latest, greatest vulnerability to demonstrate just how tenuous the security of modern networks has become. By no means has the cybersecurity community been blind to the complex security challenges spinning out of digital transformation. Related: The exposures created by API profileration.

Security 218

Security Cloud Digital transformation Cybersecurity 218

Krebs on Security

JUNE 22, 2023

The United Parcel Service (UPS) says fraudsters have been harvesting phone numbers and other information from its online shipment tracking tool in Canada to send highly targeted SMS phishing (a.k.a. “smishing”) messages that spoofed UPS and other top brands. info , legodelivery[.]info info , adidascanadaltd[.]com

Phishing 265

Phishing Retail IT Communications 265

The Last Watchdog

JULY 11, 2022

Essential security tool. VPNs factor into this shift, as the burden on individual consumers to preserve privacy and secure their sensitive data is greater than ever. VPNs factor into this shift, as the burden on individual consumers to preserve privacy and secure their sensitive data is greater than ever. billion U.S.

Security 208

Security B2C Data breaches Privacy 208

Security Affairs

JANUARY 28, 2021

The activity of the TeamTNT group has been detailed by security firm Trend Micro, but in August experts from Cado Security discovered that that botnet is also able to target misconfigured Kubernetes installations. The open-source tool is deployed within a base64 encoded script hidden in the TeamTNT cryptominer binary or ircbot.

IT 128

IT Libraries Mining Security 128

Jamf

JANUARY 12, 2023

IT and security teams are tasked with the hefty responsibilty of securing their organization's data. Without the miracle of an infinite budget, teams have to select tools that give the most security for their buck.

Security 98

Security IT 98

Security Affairs

MARCH 10, 2022

Threat actors are spreading password-stealing malware disguised as a security tool to target Ukraine’s IT Army. Cisco Talos researchers have uncovered a malware campaign targeting Ukraine’s IT Army , threat actors are using infostealer malware mimicking a DDoS tool called the “Liberator.” 35) on port 6666.

IT 96

IT Digital transformation Passwords Security 96

Jamf

APRIL 3, 2024

Keeping your endpoints secure is necessary for data protection. Learn what endpoint security is, what it defends against and tools to use for endpoint protection.

Security 111

Security IT 111

Dark Reading

JUNE 14, 2023

It's time to include messaging tool security in your cloud security program. Good first steps include tightening filter parameters on Slack and Teams.

Security 85

Security Cloud IT 85

Jamf

NOVEMBER 30, 2023

Learn about what Microsoft Security Copilot is, what it can do and how Jamf is a launch partner with Microsoft for the shiny new tool. Also, what it means when tools and expertise are combined to make your devices much more secure.

Security 52

Security IT 52

Schneier on Security

SEPTEMBER 8, 2023

Last March, just two weeks after GPT-4 was released , researchers at Microsoft quietly announced a plan to compile millions of APIs—tools that can do everything from ordering a pizza to solving physics equations to controlling the TV in your living room—into a compendium that would be made accessible to large language models (LLMs).

Risk 94

Risk Access Government IT 94

Data Breach Today

APRIL 12, 2023

To What Extent Will Security Tools Benefit From Linking Arms With OpenAI's ChatGPT?

Marketing 143

Marketing Security IT 143

Security Affairs

FEBRUARY 19, 2022

CISA has created a list of free cybersecurity tools and services that can help organizations increase their resilience. The list includes open source tools and free resources provided by government organizations and private cybersecurity firms. The list also includes tens of tools are open source. Pierluigi Paganini.

Cybersecurity 144

Cybersecurity Risk Government Security 144