[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

Dark Reading:
Why North Korea Excels in Cybercrime
DreamBus, FreakOut Botnets Pose New Threat to Linux Systems
Breach Data Shows Attackers Switched Gears in 2020
Attackers Leave Stolen Credentials Searchable on Google
Cloud Jacking: The Bold New World of Enterprise Cybersecurity
7 Steps to Secure a WordPress Site
Hacker Pig Latin: A Base64 Primer for Security Analysts
Rethinking IoT Security: It's Not About the Devices
Microsoft Releases New Info on SolarWinds Attack Chain
SolarWinds Attack, Cyber Supply Chain Among Priorities for Biden Administration
Threatpost
ADT Tech Hacks Home-Security Cameras to Spy on Women
Discord-Stealing Malware Invades npm Packages
Ransomware Attackers Publish 4K Private Scottish Gov Agency Files
Threat Actors Can Exploit Windows RDP Servers to Amplify DDoS Attacks
Einstein Healthcare Network Announces August Breach
SQL Server Malware Tied to Iranian Software Firm, Researchers Allege
Google Forms Set Baseline For Widespread BEC Attacks
Google Searches Expose Stolen Corporate Credentials
Critical Cisco SD-WAN Bugs Allow RCE Attacks
NVIDIA Gamers Face DoS, Data Loss from Shield TV Bugs
CyberScoop
Home security technician pleads guilty to spying on women, couples
White House plans to select Rob Silvers, a Mayorkas ally, to lead DHS's cyber outfit
Intel says financial graphic was 'hacked,' forcing early release of 2020 report
Rep. Maloney seeks FBI probe of Parler's role in Capitol attack
Biden orders US intelligence review of SolarWinds hack
A phishing campaign's collateral damage: Stolen passwords were publicly searchable
Social engineering gains momentum with cyber criminals
Microsoft details how SolarWinds hackers hid their espionage
Biden's Cabinet picks face cyber questions from Congress as SolarWinds looms large
The big cyber issues Joe Biden will face his first day in office
CPO Magazine
Chinese Startup Leaks 318 Million Private Records Obtained Through Data Scraping Facebook, Instagram, and LinkedIn Social Profiles
Apple’s IDFA Tracking Changes Force App Developers to Look for Workarounds; Device Fingerprinting is Popular Despite Violating App Store Rules
Healthcare Web Application Attacks Increased by 51% Since the Introduction of COVID-19 Vaccines
Fertility-Tracking App Flo Settles With FTC Over Misrepresentation of Data Sharing Practices; Warning for All Health Apps
Conditional Access – How To Support Remote Working and Identity Management
Newly Discovered DNS Vulnerabilities Put Millions of Devices at Risk
Ethical Hackers Accessed Over 100k United Nations Employee Records in a Git Data Breach
UK CMA Plans to Investigate Google Chrome’s “Privacy Sandbox” for Potential Anticompetitive Behavior
In an Uncertain World, You Can Count on These Four Trends in 2021
SolarWinds Hackers Breach Email Security Provider Mimecast, Compromise Customers’ Microsoft 365 Exchange Certificates
GBHackers On Security
Cybercriminals Target Employees of Companies Worldwide to Exploit Network Access and Privilege Escalation
Microsoft Research Reveals SolarWinds Hackers Stealthily Evaded Detection
FreakOut Malware that Exploits Critical Vulnerabilities in Linux Devices
How to Create an Effective Cybersecurity Solution Stack that can Secure Banking and Financial Operations in These Transformative Times
New Malware Discovered in SolarWinds Attack that Used 7-Zip Code to Hide
Livecoin has Announced Shutdown of Services after Being Hacked
Microsoft will Enable Domain Controller Enforcement Mode to Address Zerologon Flaw
Facebook Sued two Chrome Developers for Scraping Profile Data
WhatsApp Delays New Privacy Policy Update by Three Months
Hackers Using 4 Zero-day Vulnerabilities to Attack Windows and Android Devices Remotely
HITBSecNews - Keeping Knowledge Free for Over a Decade
Security firm Malwarebytes was infected by same hackers who hit SolarWinds
New SolarWinds hack victims emerging every day, as Malwarebytes goes public on breach
A Chinese hacking group is stealing airline passenger details
Microsoft: How 'zero trust' can protect against sophisticated hacking attacks
Signal and other video chat apps found to have some major security flaws
Top DNS service may be suffering from some serious security flaws
Palantir’s God’s-Eye View of Afghanistan
US declares Xiaomi a “Communist Chinese military company,” bans investments
A security researcher commandeered a country’s expired top-level domain to save it from hackers
The NSA warns enterprises to beware of third-party DNS resolvers
The Register - Security
Scottish enviro bods shrug off ransomware gang's extortion attempt as 4,000 files dumped online, saying it's nothing big
Clop ransomware gang clips sensitive files from Atlantic Records' London ad agency The7stars, dumps them online
Microsoft Edge goes homomorphic: Nobody will see your credentials... but you'll need to sign in to use it
It's 2021 and you can hijack a Cisco SD-WAN deployment with malicious IP traffic and a buffer overflow. Patch now
Laptops given to British schools came preloaded with remote-access worm
Microsoft SolarWinds analysis: Attackers hid inside Windows systems by wearing the skins of legit processes
Wherever your apps, users and data are heading, is your backup keeping up?
Malwarebytes says its Office 365, Azure tenancies invaded by SolarWinds hackers, insists its tools are still safe to use
Slack has entered the Matrix: Element builds a bridge to realm of encrypted, decentralised comms
Open banking is the future, so let’s secure the APIs
The Hacker News
Missing Link in a 'Zero Trust' Security Model—The Device You're Connecting With!
Sharing eBook With Your Kindle Could Have Let Hackers Hijack Your Account
Researchers Disclose Undocumented Chinese Malware Used in Recent Attacks
Here's How SolarWinds Hackers Stayed Undetected for Long Enough
MrbMiner Crypto-Mining Malware Links to Iranian Software Company
Hackers Accidentally Expose Passwords Stolen From Businesses On the Internet
Importance of Application Security and Customer Data Protection to a Startup
Google Details Patched Bugs in Signal, FB Messenger, JioChat Apps
SolarWinds Hackers Also Breached Malwarebytes Cybersecurity Firm
Researchers Discover Raindrop — 4th Malware Linked to the SolarWinds Attack
Network World Security
Cisco tags critical security holes in SD-WAN software
Lessons that insurrection selfies hold for legitimate enterprises
How to deploy 802.1x for Wi-Fi using WPA3-Enterprise
SolarWinds roundup: Fixes, new bad actors, and what the company knew
SASE check list: 7 key evaluation criteria
SolarWinds Trojan: Affected enterprises must use hot patches, isolate compromised gear
Trojan in SolarWinds security has far-reaching impact
SolarWinds attack explained: And why it was so hard to detect
Zero trust planning: Key factors for IT pros to consider
Cisco gains container security with Banzai Cloud buy