Ken's Automated News Feed Aggregator
Introduction. In this 5 part series we will be showing ways that attackers gain internal access by attacking services that companies commonly expose to the internet to facilitate remote work. We will highlight the following 5 of scenarios: Application …
Continue ReadingMenlo Security has detected a sophisticated, multi-stage attack leveraging the current COVID-19 pandemic. Our data has shown that COVID-19–based attacks are much more successful than typical phishing attacks. The global pandemic is literally a life-or-…
Continue ReadingSummary As many citizens transition to teleworking and home education due to COVID-19, multiple video-teleconferencing (VTC) platforms have become targets for threat actors. The FBI Boston Division stated they have received multiple reports of conferen…
Continue ReadingFollowing a recent disclosure about Iranian hackers targeting on vulnerabilities in VPN servers like the Pulse Secure, Palo Alto Systems, Fortinet, and Citrix, Microsoft gave its first-ever ‘targeted’ warning to a few dozen hospitals, informing them of…
Continue ReadingJan Neutze, senior director for digital diplomacy at Microsoft , has said that the company is launching efforts as part of its Defending Democracy program to address election security amid the ongoing health crisis. Neutze wrote in a blog post publishe…
Continue Reading.
This Week in Security News: More Than 8,000 Unsecured Redis Instances Found in the Cloud and Wiper Malware Called “Coronavirus” Spreads Among Windows Victims.
Welcome to our weekly roundup, where we share what you need to know about the cybersecuri…
Continue ReadingAn APT group (Advanced Persistent Threat) has been exploiting vulnerabilities in Mozilla Firefox and Internet Explorer browsers as part of the campaign aimed at China and Japan. The flaws in question are (Firefox) and CVE-2020-0674 (IE), which have bee…
Continue Readingby DH Kass • Apr 2, 2020. Managed Security Services Microsoft has told “several dozen hospitals” to immediately patch weaknesses in their virtual private network (VPN) infrastructure after finding evidence that a ransomware crew was probing for weaknes…
Continue ReadingMicrosoft Server Message Block (SMB) protocol. According to the specialists of the pentesting course company, this is a pre-remote code execution vulnerability existing in the SMBv3 network communication protocol. According to reports, this vulnerabili…
Continue Readingtechnology Zoom founder promises to remedy security, privacy concerns during a ‘feature freeze’
Written by Apr 2, 2020 | CYBERSCOOP. Shannon Vavra Zoom’s founder says the company behind the popular videoconferencing app will spend the next 90 days foc…
Continue Reading